Privacy Policy for Agentic Services of utxo AG

utxo AG, Döttingerstrasse 21, 5303 Würenlingen, Switzerland ("utxo", "we", "us") provides agentic services via the Agentic Service Marketplace ("Marketplace"). This Privacy Policy explains how we process personal data in connection with our agentic services.

1. DATA CONTROLLER
The data controller for processing activities under this Privacy Policy is:

utxo AG
Döttingerstrasse 21
5303 Würenlingen
Switzerland
Email: support@nmkr.io

2. DATA WE PROCESS
We process the following categories of personal data:

• Identification and contact data (e.g. name, email address);
• Account data (e.g. user credentials, wallet identifiers, usage preferences);
• Interaction data (e.g. messages submitted through chat or forms);
• Usage data (e.g. access logs, IP address, device/browser information);
• Service output data generated through the agentic services.

3. PURPOSES AND LEGAL BASIS
Personal data is processed for the following purposes:

• Service provision (Art. 6(1)(b) GDPR): to provide the agentic services as agreed with the user;
• Compliance (Art. 6(1)(c) GDPR): to meet legal obligations;
• Security and abuse prevention (Art. 6(1)(f) GDPR): to monitor and protect the integrity of our systems;
• User support (Art. 6(1)(f) GDPR): to answer questions and assist users;
• Analytics (Art. 6(1)(a) GDPR): with consent, we use Google Analytics to understand service usage and improve performance.

4. SUPPORT CHAT (PLAIN)
We use "Plain" as a support chatbot tool integrated into the Marketplace. When users interact with the chatbot, any personal data entered (e.g. name, email, inquiry content) is collected solely for the purpose of responding to support requests. We recommend not including sensitive or confidential data unless necessary.

5. GOOGLE ANALYTICS
We use Google Analytics to understand how users interact with our agentic services. Google Analytics uses cookies and similar technologies to collect usage data (e.g. visited pages, duration, referrer URL). This data is processed anonymously and helps us improve the service. Data processing by Google takes place under their own privacy policies and applicable safeguards.

6. DATA SHARING
Personal data may be shared with:

• Service providers (e.g. IT infrastructure, analytics, support tools);
• Network operations partners who help provide the agentic services;
• Regulators or legal authorities where legally required.

If data is transferred outside Switzerland or the EU/EEA, we ensure appropriate safeguards such as Standard Contractual Clauses.

7. RETENTION
We retain personal data only as long as necessary for the above purposes or to comply with legal retention obligations.

8. YOUR RIGHTS
You have the following rights:

• Right of access, correction, and deletion;
• Right to restrict processing;
• Right to data portability;
• Right to object to processing based on legitimate interests;
• Right to withdraw consent (for analytics);
• Right to lodge a complaint with the FDPIC or an applicable supervisory authority.

To exercise your rights, contact us at support@nmkr.io.

9. SECURITY
We use appropriate technical and organizational measures to protect personal data against loss, misuse, or unauthorized access.

10. AI OUTPUTS AND AUTOMATED PROCESSING
Agentic services may generate content via automated systems and artificial intelligence. While the AI-generated output is based on probabilistic models, it does not involve fully automated decisions with legal or similar effects unless explicitly agreed.

11. COOKIES AND TRACKING
Only essential cookies and Google Analytics are used. You can manage cookie preferences through your browser settings. See our cookie notice for further information.

12. CHANGES TO THIS POLICY
We may update this Privacy Policy. The latest version will always be published on our website or Marketplace. Material changes will be notified accordingly.

Effective Date: June 26, 2025