Privacy Policy

Who is responsible for your data

INTENT is operated by BMC SAASY TECH LTD (company number 12454158; registered office Flat 338, 372 Old Street, London, EC1V 9LT). For the personal data described below, we are the data controller (we decide what is collected and why) under UK GDPR.

What we collect, and where it lives

To run your subscription we need your email address and payment details. We do not store these on our own servers. They are collected and held by Stripe, our payment processor, whose security and card-industry compliance (PCI-DSS) exceed what most companies could build themselves. To link your subscription to your agent we hold a one-way hash of your email (a fingerprint, not the address itself; we still treat it as personal data, because anyone who already knows an address could check it against the fingerprint) and your subscription status. Your trading activity happens under your own wallet on the public blockchain; we never see or hold your funds or keys.

We also keep:

• Your agent’s wallet address and account state (its positions, earnings, deposits and withdrawals), so the agent and the phone remote can show them.
• What you ask the assistant, with the figures it needs to answer. It is sent to our servers and to the AI provider that powers the assistant.
• When you download the agent: the email fingerprint, the download, your browser’s user agent, and an approximate location (country, region, city and time zone). The location is looked up on our own server from your internet address; the address itself is not stored and is not sent to anyone else.
• If you refer someone or were referred: who referred whom, the referred person’s email fingerprint and plan, and any referral payouts.
• If you ask for an enterprise demo: what you put in the form, which is your name, email address, company, and any role, phone number, region and message you add.

If you joined through a partner service

Some services built on INTENT switch your agent on when you do something in the real world, for example Localmoney, which grants access when you spend time at a participating local business. Where you signed up through a partner like that, they are the data controller for whatever they collect (including any location check), under their own privacy policy. They pass us only what we need to activate your agent: your email address and how long your access should last. We never receive your location, your movements, or any record of where you have been.

Why we process it (lawful basis)

• To provide the service you signed up for: performance of our contract with you (email, subscription).
• To take payment: performance of contract, via Stripe.
• To prevent fraud and abuse, and meet legal obligations: our legitimate interests and legal duties.

Who we share it with

Stripe (payments) and Resend (to send you sign-in and account emails) act as our processors on our instructions, as does the AI provider that powers the assistant. We do not sell your data. We may disclose information where required by law.

How long we keep it

We keep account data for as long as you have an account and for a reasonable period afterwards to meet legal, tax and fraud-prevention obligations, then delete or anonymise it. Stripe retains payment records under its own retention and legal obligations.

Your rights

Under UK GDPR you can ask us to access, correct, delete, or restrict your personal data, object to certain processing, or request portability. To exercise any of these, email support [at] intent.farm and we'll help.

Contact

Privacy questions: support [at] intent.farm. See also our Terms and Security page.