Agicash Customer Privacy Notice

Last Updated: April 22, 2026

This Privacy Notice describes how MakePrisms, Inc., a Delaware corporation doing business as Agicash ("Agicash," "we," "us," or "our") receives, stores, uses, discloses, and otherwise processes information about you when you access or use the Agicash platform to purchase, receive, swap, hold, or redeem Digital Credit, as defined in our Customer Terms of Use (the "Agicash Services"). This Privacy Notice applies to the Agicash Digital Credit and Mint services and is in addition to any other privacy notices we provide (for example, our separate privacy notice for the Agicash non-custodial wallet, available at www.agi.cash/privacy).

The Agicash Services allow you to purchase prepaid value ("Digital Credit") from Agicash that is redeemable solely for goods or services provided by a specific merchant ("Merchant"). Digital Credit is represented as Ecash, digital bearer tokens generated using the Cashu Protocol. Agicash operates the cryptographic token service that issues Ecash when Digital Credit is purchased and verifies Ecash upon redemption (the "Mint"). In providing the Agicash Services, Agicash is the exclusive seller and issuer of Digital Credit and, upon redemption, acts as the Merchant's agent for the limited purpose of collecting payment.

Because Agicash operates the Mint, we receive and process information about your purchase and redemption of Digital Credit that differs from the information collected by our non-custodial wallet. This Privacy Notice describes those data practices.

Agicash may change this Privacy Notice from time to time. If Agicash makes changes, we will notify you by revising the date at the top of this Notice. If we make material changes, we will provide you with additional notice. We encourage you to review this Privacy Notice regularly.

Collection of Information

Information Agicash Collects Automatically

When you use the Agicash Services, we automatically collect the following information:

•Device, Usage, and Activity Information: Agicash collects information about how you access and interact with the Agicash Services, including data about access dates and times and related metadata; and data about the device and network you use, such as your operating system version, browser version, application version, IP address, and other unique identifiers.

•Transaction Data: Because Agicash operates the Mint, we collect and process records of your Digital Credit activity, including:

•The amount and timestamp of each Digital Credit purchase associated with your account;

•The Merchant whose Mint issued the Digital Credit;

•The payment method used to purchase Digital Credit (for example, Bitcoin payment via a third-party payment processor);

•The amount and timestamp of each Digital Credit redemption;

•The Merchant at which each redemption occurs; and

•Settlement records reflecting amounts payable to Merchants in connection with your redemptions.

Information You Provide to Agicash

To purchase Digital Credit, you must create an account. We collect information directly from you, including your email address and any other information you choose to provide (for example, in communications with our support team). We require authentication to purchase Digital Credit. As a result, purchases of Digital Credit are associated with your authenticated account and email address.

Information Agicash Collects from Other Sources

We collect information about your transactions from third-party payment processors that facilitate payment for Digital Credit. For example, if you pay for Digital Credit using Bitcoin, our third-party payment processor may provide us with information about the payment, such as the amount received by Agicash. We do not receive your payment credentials or other sensitive payment information from these processors.

We may also collect information from other sources, such as service providers who help us with fraud detection, compliance, and analytics.

Information Agicash Derives About You

Agicash may derive information or draw inferences about you based on the information we collect. For example, we may infer your approximate location based on your IP address or use your transaction history to detect and prevent fraud.

The Cashu Protocol uses blind signature cryptography. This means that while Agicash, as the operator of the Mint, observes the amount of Digital Credit issued to your account and, separately, the amount of Digital Credit redeemed at each Merchant, the Mint is cryptographically unable to directly link a specific issuance of Digital Credit to a specific redemption event. We can see how much Digital Credit you purchased and, separately, the volume of redemptions occurring at each Merchant, but we cannot determine from the Mint alone which specific purchase corresponds to which specific redemption.

This unlinkability is a property of the Cashu Protocol. However, you should be aware that other information we collect (such as data from the usage of our non-custodial wallet, account activity, IP address, and timing patterns) may, in some circumstances, allow inferences to be drawn about your Digital Credit activity.

Use of Information

Agicash uses the information we collect or derive about you to provide, maintain, and improve the Agicash Services, including to:

•Process your purchases, swaps and redemptions of Digital Credit;

•Settle payments to Merchants on your behalf as their agent;

•Authenticate you and secure your account;

•Communicate with you;

•Monitor and analyze trends, usage, and activity in connection with the Agicash Services;

•Detect, investigate, respond to, and protect against fraud, security incidents, unauthorized activity, and other malicious, deceptive, fraudulent, or illegal activity;

•Comply with applicable legal, regulatory, and record-keeping obligations;

•Enforce transaction limits and other controls applicable to the Agicash Services;

•Send you marketing communications (see the Your Choices section below for information about how to opt out); and

•Create de-identified and aggregate data that cannot reasonably be linked to you.

Disclosure of Information

We disclose information about you as described below:

•Merchants: When you redeem Digital Credit at a Merchant, we provide the Merchant with information about the redemption, including the amount, timestamp, and any other information reasonably necessary to complete the transaction. We do not disclose your email address, purchase history, or other account information to Merchants other than the information required to process the redemption.

•Third-Party Payment Processors: We share information with payment processors as necessary to facilitate payment for Digital Credit and to settle amounts to Merchants.

•Vendors and Service Providers: We share personal information with our vendors and service providers who perform services on our behalf, including providers of hosting, analytics, fraud detection, compliance, email distribution, and customer support.

•Law Enforcement Authorities and Individuals Involved in Legal Proceedings: Agicash will provide information to law enforcement and regulators in response to a request for information if we believe that disclosure is in accordance with, or required by, any applicable law, regulation, or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.

•To Protect the Rights of Agicash and Others: Agicash may provide information to our advisors, other users, or law enforcement if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Agicash, our users, Merchants, the public, or others.

•Professional Advisors: Agicash provides information to our legal, financial, insurance, and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.

•Corporate Transactions: Agicash may provide information in connection with, or during negotiations of, certain corporate transactions, including a merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

•With Your Consent or at Your Direction: Agicash may provide information to third parties when we have your consent or you direct us to do so.

Your Choices

Account Information

You can access, correct, and delete certain information stored within your Agicash account at any time by reaching out to support@agi.cash. Please note that we may be required to retain certain information about your transactions for legal, regulatory, or record-keeping purposes even after you request deletion.

Communications Preferences

You may opt out of receiving promotional emails from Agicash by following the instructions in those communications. If you opt out, we may still send you non-promotional emails, such as those about your account or transactions.

Individuals in Europe

If you reside in Europe, this section applies to you.

Legal Basis for Processing

When we process your personal information as described in this Privacy Notice, we do so in reliance on the following lawful bases:

•To perform our responsibilities under our contract with you (for example, processing your Digital Credit purchases and redemptions);

•When we have a legitimate interest in processing your personal information to operate our business or protect our interests (for example, to provide, maintain, and improve the Agicash Services, conduct data analytics, detect fraud, and communicate with you);

•To comply with our legal obligations (for example, record-keeping); or

•When we have your consent to do so (for example, when you opt in to receive marketing communications from us). When consent is the legal basis for our processing of your personal information, you may withdraw such consent at any time.

Data Subject Requests

You have the right to (1) access your personal information, including in a portable format, (2) request erasure of your personal information, and (3) request correction of inaccurate personal information. In addition, you may have the right to object to certain processing or request that we restrict certain processing. To exercise any of these rights, please contact us at legal@agi.cash.

If you have a concern about our processing of personal information, we encourage you to contact us in the first instance. However, you have the right to lodge a complaint with the Data Protection Authority where you reside. Contact details for your Data Protection Authority can be found using the links below:

•For individuals in the European Union: https://edpb.europa.eu/about-edpb/board/members_en

•For individuals in the UK: https://ico.org.uk/global/contact-us/

•For individuals in Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html

International Transfers

Agicash is based in the United States, and we and our service providers process and store personal information on servers located in the United States and in other countries. Whenever we make restricted international transfers of personal information, we take steps to ensure that your personal information receives an adequate level of protection (by putting in place appropriate safeguards, such as contractual clauses) or ensure that we can rely on an appropriate derogation under data protection laws.

Data Retention

We retain personal information associated with your account for as long as your account remains active and for as long as is reasonably necessary to comply with our legal, regulatory, and record-keeping obligations. Because Agicash operates the Mint and records transactions associated with your account, we may retain certain transaction data for longer than the two-year retention period applicable to our non-custodial wallet. We will delete or anonymize personal information when it is no longer needed for the purposes for which it was collected and when no legal, regulatory, or contractual obligation requires its retention.

Contact Us

If you have questions about this Privacy Notice, please contact Agicash at legal@agi.cash.