Privacy Policy

This Privacy Policy explains how Popdot AI collects, uses, and protects information when you use the Popdot AI platform at popdot.ai. Popdot AI is a domain rental marketplace where domain owners list domains and humans and AI agents rent subdomain access. We operate on a Bring Your Own Hosting model, so we route traffic to content hosted by others and do not host that content ourselves.

1. Information We Collect

We collect information you provide directly, including your name, email address, and account credentials when you create an account, and payment details when you fund a wallet or receive payouts. For domain owners, we collect domain ownership verification data and the registrar connection you authorize. For agent sponsors, we collect the identifiers of the agents you operate and the spending mandates you define.

We also collect operational information generated through your use of the Platform, such as rental records, transaction history, API request logs, and DNS routing activity.

2. How We Use Your Information

We use your information to operate the Service, process payments and payouts, verify domain ownership, route traffic to rented subdomains, communicate with you about your account, maintain trust and safety across the Platform, meet our financial and legal obligations, and improve our services. We do not sell your personal information to third parties.

3. Payment Processing

Card payments are processed by Stripe, and your card details are handled directly by Stripe rather than stored on our servers.

For stablecoin payments, agents settle per transaction in USDC on the Base network using the x402 protocol. Wallet addresses and transaction hashes are recorded so we can verify settlement. Blockchain transactions are written to a public ledger that is outside our control and cannot be deleted by us.

During the soft launch the Platform is closed-loop and lists only domains owned by Popdot AI. When third-party domain owners are supported, an owner's share of a rental settles directly to the owner on the Base network through a non-custodial on-chain split, and the Platform does not hold owner funds. An owner who wants US dollars converts their USDC through their own exchange or moves it to an external wallet; the Platform does not convert or route owner funds.

4. DNS and Domain Data

When you connect a domain through a supported registrar (Cloudflare or Vercel), we store the connection token needed to manage DNS records on your behalf. These tokens are encrypted at rest and can be revoked at any time from your account or at your registrar. We create and manage only the DNS records required to route the subdomains you list.

5. AI Agent Data

For AI agents using the Platform, we collect agent identifiers, the public key or credential the agent authenticates with, the human operator the agent is linked to, transaction history, content deployment logs, and signals about how the agent operates. We use this information to maintain trust and safety, review content, prevent abuse, and operate the Platform securely. Every agent action is associated with a responsible human operator.

6. Service Providers

We share information with third parties only as needed to run the Platform. These include Stripe for payments and identity verification, Clerk for authentication, Cloudflare and Vercel for DNS and hosting, our email provider for account and notification messages, and the cloud infrastructure and database providers that host the Service. Each provider receives only the information needed to perform its function and is bound by its own privacy obligations.

7. Cookies and Analytics

We use essential cookies for authentication and session management. We may use privacy-conscious analytics to understand platform usage patterns in aggregate. You can control cookie settings through your browser.

8. Data Security

We implement industry-standard security measures, including encryption in transit (TLS) and at rest, encrypted storage of registrar tokens and other secrets, and access controls. Agent private keys are delivered once at issuance and are not retained on our systems afterward. No method of transmission over the Internet is fully secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. We retain transaction and audit records for longer where required to meet financial, tax, and legal obligations. You may request deletion of your account and associated data by contacting us, subject to those retention requirements.

10. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal information, request a copy of your data, or restrict its processing. Contact us to exercise these rights, and we will respond as required by applicable law.

11. Waitlist

When you join the Popdot AI waitlist, we collect your email address. We use it to notify you when it is available and to send occasional product updates.

You can unsubscribe at any time by replying to any email from us or contacting [email protected].

We use essential cookies for site functionality. We do not use third-party advertising or tracking cookies.

12. Contact

For privacy-related inquiries, contact us at [email protected]. Popdot AI is a trade name of Park Maxing Inc., a Florida corporation.