Privacy Policy

Privacy Policy.

How Digital Currensy Inc. handles personal information for AGENTIC+SPA. Effective November 2, 2026. We do not sell or share personal information.

1. Scope · 2. Information we collect · 3. How we use information and legal bases · 4. Cookies and analytics · 5. How we share information · 6. Subprocessors · 7. Do not sell or share (California) · 8. California privacy rights · 9. EEA, UK and Swiss rights · 10. International transfers · 11. Security · 12. Retention · 13. Breach notification · 14. Children · 15. Contact and changes

1. Scope

This Privacy Policy explains how Digital Currensy Inc., a Delaware corporation (“DCI,” “we”), operating the AGENTIC+SPA brand, collects, uses and shares personal information through agentic-spa.vercel.app and the AGENTIC+SPA services (the “Service”). Where we process Customer Data on behalf of a business customer under a Written Agreement, we act as that customer’s service provider or processor, and the customer’s own privacy notice governs; guest data stays in the client’s own rails.

2. Information we collect

Information you give us. When you use the contact form we collect your name, title, email address, house (organization), selected desk and your message. If you choose to fill in the on-page admission form, its contents stay in your browser and are not sent to us by that form.

Information collected automatically. Our hosting provider receives standard technical data with each request, such as IP address, user agent, requested URL, referrer and timestamps, which it uses to deliver and secure the site. Our contact endpoint uses the IP address in memory for a short-term rate limit and does not store it.

Customer engagements. If you become a customer, we process the information described in your Written Agreement, which may include agent configurations, logs, prompts, outputs and business contact data.

We do not intentionally collect sensitive personal information through the site, and we do not scrape reviews or listings or harvest inboxes.

3. How we use information and legal bases

We use personal information to: respond to inquiries (performance of a contract or steps at your request; legitimate interests); provide, secure, maintain and improve the Service (contract; legitimate interests); prevent spam, abuse and fraud (legitimate interests); comply with law and enforce our terms (legal obligation; legitimate interests); and send communications you request or consent to (consent, which you may withdraw at any time). Where we rely on legitimate interests, we balance them against your rights.

4. Cookies and analytics

The site does not set advertising or analytics cookies and does not load third-party analytics, advertising or tracking scripts. Fonts and media are served from our own host. If we add cookies or analytics later, we will update this policy and, where required, ask for consent first.

5. How we share information

We do not sell personal information and do not share it for cross-context behavioral advertising. We disclose it only to: the service providers (subprocessors) listed in Section 6, under contracts limiting their use; professional advisers; authorities or others when required by law or to protect rights, safety and security; and a successor in a merger, acquisition, financing or sale of assets, subject to this policy.

6. Subprocessors

Based on the code that runs the public site, these service providers process personal information for us:

Customer engagements may use additional providers named in the Written Agreement, and customers’ own third-party services operate under the customer’s own keys and terms. We will update this list when it changes.

7. Do not sell or share (California)

We do not sell or share (as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, “CCPA”) personal information, and have not done so in the prior 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16. We do not use or disclose sensitive personal information for purposes that would require a right to limit.

8. California privacy rights

If you are a California resident, you may have the right to: know the categories and specific pieces of personal information we collect, the sources, purposes and recipients; delete it; correct it; opt out of sale or sharing (which we do not do); limit use of sensitive personal information (which we do not use for restricted purposes); and not receive discriminatory treatment for exercising rights. In the prior 12 months we collected identifiers and professional information (name, title, email, organization), the content of your messages, and internet activity (request logs), from you and your device, for the purposes in Section 3, and disclosed them for business purposes to the providers in Section 6. You or an authorized agent may submit a request through the contact method in Section 15; we will verify your request by matching information you provide to what we hold, and will respond within the time the law requires.

9. EEA, UK and Swiss rights

If the GDPR or UK GDPR applies, DCI is the controller of personal information collected through the site. You may have the right to access, rectify, erase, restrict or object to processing, to data portability, to withdraw consent at any time without affecting prior processing, and to lodge a complaint with your local supervisory authority. Contact us using Section 15 to exercise these rights.

10. International transfers

DCI and its providers are based in the United States, and personal information is processed there and wherever providers operate. Where required, transfers from the EEA, UK or Switzerland rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK Addendum, or a provider’s certification under the EU-U.S. Data Privacy Framework and its extensions.

11. Security

We use reasonable administrative, technical and physical measures designed to protect personal information, including encryption in transit (HTTPS), access controls, secret storage in our hosting provider’s encrypted environment settings, server-side input validation, spam honeypots and rate limiting. No method of transmission or storage is completely secure, and we cannot guarantee security.

12. Retention

We keep contact-form messages in our email systems for as long as needed to respond and to maintain business records, generally no longer than 24 months after our last interaction unless a longer period is required by law or a Written Agreement. Hosting request logs are retained by Vercel under its own retention periods. In-memory rate-limit data is discarded when the serverless instance ends. Customer Data is retained as the Written Agreement provides.

13. Breach notification

If we become aware of a security incident that compromises personal information, we will investigate, take steps to contain it, and notify affected individuals, customers and regulators as and when required by applicable law.

14. Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

15. Contact and changes

Contact us about privacy or to exercise your rights through the contact form at agentic-spa.vercel.app/#contact or by email to info@digitalcurrensy.com, addressed to Digital Currensy Inc., Attention: Privacy. We may update this policy; we will post the new version with a new effective date and give notice of material changes where required. Effective November 2, 2026.