Privacy Policy

Effective date: 2026-07-10 · Last updated: 2026-07-10

AgentRoam is designed to collect the minimum needed to deliver your order.

What we collect

• Your delivery email address (required to deliver the product).
• Order details: product, amount, coin/network, order state.
• Your IP address and browser user-agent, forwarded to Cryptorefills as required by its anti-fraud rules.
• Anonymous usage events (page views, checkout funnel) for product analytics.

What we never collect

• Wallet private keys or custody of funds — payments go directly to Cryptorefills.
• Identity documents — KYC, where legally required, happens on Cryptorefills’ own secure pages.
• Payment card data — there are no fiat payments on this site.

Sharing

Order data is shared with Cryptorefills B.V. as merchant of record to fulfil your purchase, and with our email provider to send transactional messages. We do not sell personal data.

Order and transactional data

For each order we keep the product, amount, coin and network, order state, timestamps, the delivery email address, the phone number for direct top-ups, and a private status token that protects your order page. Your IP address and browser user-agent are forwarded to the merchant of record as part of its anti-fraud checks. The same applies when an order is placed by an AI agent through our MCP endpoint; agent requests are additionally rate-limited and logged (IP address, user agent) for abuse prevention.

Newsletter and marketing emails

If you request the eSIM setup checklist or sign up for travel tips, we store your email address and the page you signed up from, and send you the requested content plus occasional marketing emails. The legal basis is your consent, given when you submit the form, and you can withdraw it at any time. Emails are sent through Resend, our email service provider, which processes your address on our behalf. Every marketing email includes an unsubscribe link, and you can also email privacy@agentroam.ai. Your address is kept until you unsubscribe or ask us to delete it; after unsubscribing it is retained only on a suppression list so we do not email you again. Transactional emails about an order (delivery, status) are sent by the merchant of record and are not marketing.

Analytics and cookies

We use Google Analytics only if you accept analytics cookies in the consent banner — declining keeps the site fully functional. We also record first-party usage events (page views, checkout steps) on our own infrastructure without third-party cookies. The providers, cookie names and lifetimes, and how to change your choice at any time are listed on our Cookie Policy page.

Retention

Order and transaction records are kept for up to 7 years to meet bookkeeping, tax and fraud-prevention obligations. Newsletter data is kept until you unsubscribe or request deletion. Support correspondence is kept for up to 24 months after the request is resolved. Analytics data follows the retention windows described on the Cookie Policy page.

International data transfers

We operate from the United States, the merchant of record (Cryptorefills B.V.) operates from the European Union, and our hosting, database and email providers process data in the United States and the EU. Where the GDPR applies to you, transfers outside the EEA rely on safeguards such as the European Commission’s Standard Contractual Clauses implemented by our processors.

Your privacy rights

Depending on where you live (for example under the GDPR or the California Consumer Privacy Act), you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, to withdraw consent at any time, and to lodge a complaint with your local data-protection authority. We do not sell personal data, and we will not discriminate against you for exercising these rights.

Access and deletion requests

Email privacy@agentroam.ai from the address your request concerns, so we can verify that you control it. We respond within 30 days. Some records — such as completed order data — may have to be retained for the periods above to meet legal obligations even after a deletion request; anything not legally required is removed.

Security

All traffic is encrypted in transit (TLS). Order pages are protected by private tokens, secrets are kept out of the codebase, and our databases are access-controlled managed services. We never store wallet keys, identity documents or card data — see “What we never collect” above.

Children’s privacy

The service is intended for adults and is not directed at children under 18 (see the eligibility section of the Terms of Service). We do not knowingly collect personal data from children; if you believe a child has provided us data, contact privacy@agentroam.ai and we will delete it.

Changes to this policy

We may update this policy from time to time. The effective date above reflects the current version, and material changes will be indicated on this page. Significant changes to how we use newsletter data will be announced by email.

Contact

Multifunnels, Inc. — for privacy requests, contact privacy@agentroam.ai. For order support, contact support@agentroam.ai.