Last Updated: April 22, 2026

Agicash Privacy Notice

This Privacy Notice describes how MakePrisms Inc., a Delaware corporation, ("MakePrisms," "Agicash," "we," "us," or "our") receives, stores, uses, discloses, and otherwise processes information about you, when you access or use our non-custodial wallet web or mobile application (the "Service") either through www.agi.cash or the Agicash app (when made available), (collectively, the "Site"), or through any external applications where the Service is embedded or utilized. We may provide different or additional notices of our privacy practices for other services or offerings that we provide, in which case, those notices will supplement or replace the disclosures in this Privacy Notice.

The Service offered by Agicash provides you with an interface for a non-custodial digital wallet ("Wallet") that allows you to store, track, and transfer "Ecash." Ecash is a bearer-style digital unit of account that is issued and recorded by participating "Mints," which are Third-Party Service Providers (defined below) that operate in accordance with the "Cashu Protocol" and that issue Ecash in exchange for bitcoin or other value. The Cashu Protocol is a set of standards governing transaction messaging and cryptography that, when operating in combination, allow users to mint, redeem, and transfer Ecash.

In addition to the Wallet and our Services involving Ecash, our Services may also provide you with the ability to access certain other products, services, materials, or content provided by third parties (each, a "Third-Party Service Provider," and such services are "Third-Party Services") from within the Site. Any Third-Party Services available from within the Site may be subject terms, conditions, and policies (including privacy policies) imposed by the Third-Party Service Provider ("Third-Party Service Terms"). Your use of any such Third-Party Services via the Site is subject to the Third-Party Service Terms and these Terms.

To support the Wallet's functionality, we operate servers that store data related to your account, operational data, and transaction metadata (collectively, "Wallet Data"). We also store transaction data encrypted with your Wallet's Private Key(s) ("Encrypted Data"). Encrypted Data is only accessible via the Site, making such Encrypted Data inaccessible to Agicash for any purpose. Agicash cannot access the Wallet's Private Keys and does not receive or hold a copy of the decryption key(s) necessary to access the Encrypted Data. Via the Site, you will have the sole power to access your Private Keys and decrypt the Encrypted Data.

Agicash may change this Privacy Notice from time to time. If Agicash makes changes, we will notify you by revising the date at the top of this notice. If we make material changes, we will provide you with additional notice. We encourage you to review this Privacy Notice regularly to stay informed about our information practices and the choices available to you.

Collection of Information

To operate the Service, Agicash servers may need to store a limited amount of personal information, such as account data, operational data, and transaction metadata. Agicash may also store other transaction information as Encrypted Data, but as noted above, that is only accessible via the Site and inaccessible to Agicash for any purpose. In this section, we describe the categories of personal information that Agicash does collect and the sources of this information.

Information that Agicash Collects Automatically

When you use the Service, we automatically collect the following information from the Site:

•Device, Usage, and Activity Information: Agicash collects information about how you access and interact with the Site and Service, including data about access dates and times and related metadata; and data about the device and network you use, such as your operating system version, browser version, application version, IP address, and other unique identifiers. Agicash collects transaction metadata (e.g., transaction direction, associated account, date and time, currency); the number (but not the value) of encrypted Ecash tokens within your wallet; and the extended public key (xpub) used to derive Cashu Protocol locking keys. Agicash collects Encrypted Data such as Ecash tokens, transaction amounts, fees, preimages, and bolt11s. Encrypted Data is inaccessible to Agicash for any purpose. Agicash also temporarily collects certain transaction data required for sending and receiving payments including send and receive quotes, send and receive swaps, and transaction identifiers. These temporary entities are automatically deleted within 24 hours of completion or failure.

•Information Collected by Cookies: Agicash uses certain functional cookies to set optional themes or color palettes for the Site. For more information about the cookies and similar tracking technologies used and the choices available to you, see the Your Choices sections below.

The data described above is stored solely to support self-directed user activity. Agicash does not control, access, or transmit user funds and does not use this data to initiate or process transactions.

Information You Provide to Agicash

If you create an Agicash account, we will collect information directly from you, including your email address, username, wallet and Lightning Address, contacts (i.e., other Agicash users saved to your account), your default currency, certain Mint URLs, any third-party accounts tied to your Agicash wallet (e.g., Spark, Stripe, or layer two bitcoin network services), and any other information you choose to provide (e.g., email communications).

As a non-custodial wallet, if you submit or withdraw funds using the Service, you will be directed to interact directly with a Third-Party Service.

Information Agicash Collects from Other Sources

As part of your interactions with Third-Party Services (e.g., exchanging fiat currency), you may be directed by the Service to a third-party fiat on-ramping provider (e.g., Stripe) or a Mint, to complete certain Know Your Customer ("KYC") and Anti-Money Laundering ("AML") regulatory requirements. While the Service may direct users to engage with such Third-Party Services to provide the applicable KYC and AML personal information, Agicash does not receive or have access to any KYC or AML data that you provide to them. The information you provide to such Third-Party Services is subject to their own privacy policies.

We obtain information about you from other sources. For example, we may collect information about your use of the wallet from Mints (e.g., the number (but not the value) of tokens issued to you), from service providers who help us collect certain Device, Usage, and Activity Information, and from other Agicash users when they list you as one of their contacts in their accounts.

Further, if you create or log into your account through a third-party platform (such as Google), we may also inadvertently receive other personal information about you, such as your name, profile picture, email address, and any other information the third-party platform discloses about you, in accordance with the authorization procedures determined by such platform.

Information Agicash Derives About You

Agicash may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your approximate location based on your IP address or infer that you are interested in certain products or services based on your previous uses of the Service.

Use of Information

Agicash uses the information we collect or derive about you to provide and maintain the Service, including to enable you to connect and interact with third parties (such as other Cashu Protocol users or Mints) through the Service.

We also use the information we collect to:

•Communicate with you;

•Provide, maintain, and improve the Service;

•Develop new products and services;

•Personalize your experience (e.g., color palette of the Site);

•Send you technical notices, security alerts, support messages, and other transactional or relationship messages;

•Send you marketing communications (see the Your Choices section below for information about how to opt-out of these communications at any time);

•Monitor and analyze trends, usage, and activities in connection with the Service;

•Detect, investigate, respond to, and help protect against security incidents and other malicious, deceptive, fraudulent, or illegal activity, and help protect the rights and property of Agicash and others;

•Comply with legal and financial obligations; and

•Create de-identified and aggregate data that cannot reasonably be linked to you.

Disclosure of Information

We disclose information about you as described in this Privacy Notice and below to:

•Vendors and Service Providers. We share personal information with our vendors and service providers who perform services on our behalf, such as companies that assist us with email distribution, and analytics.

•Other Ecash Users. Agicash provides information, such as that related to your applicable transaction when you direct us to do so.

•Law Enforcement Authorities and Individuals Involved in Legal Proceedings. Agicash will provide information to law enforcement in response to a request for information if we believe that disclosure is in accordance with, or required by, any applicable law, regulation, or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.

•To Protect the Rights of Agicash and Others. Agicash provides information to our advisors, other users, or law enforcement if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Agicash, our users, the public, or others.

•Professional Advisors. Agicash provides information that may include your personal information to our legal, financial, insurance, and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.

•Corporate Transactions. Agicash provides information in connection with, or during negotiations of, certain corporate transactions, including a merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

•Others With Your Consent or at Your Direction. Agicash may provide information to third-parties when we have your consent or you direct us to do so.

Your Choices

Account Information

You can access, correct, and delete certain information stored within your Agicash account at any time by reaching out to support@agi.cash.

Cookies and Similar Technologies

Agicash uses cookies and similar technologies, as described above. You can usually adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies could affect some of the functionality of our services, such as remembering your preferred Site theme or color palette.

Communications Preferences

You may opt-out of receiving promotional emails from Agicash by following the instructions in those communications. If you opt-out, we may still send you non-promotional emails, such as those about your account or transactions.

Individuals in Europe

If you reside in Europe, this section applies to you.

Legal Basis for Processing

When we process your personal information as described in this Privacy Notice, we do so in reliance on the following lawful bases:

•To perform our responsibilities under our contract with you (e.g., providing the products and services you requested);

•When we have a legitimate interest in processing your personal information to operate our business or protect our interests (e.g., to provide, maintain, and improve our products and services, conduct data analytics, and communicate with you);

•To comply with our legal obligations (e.g., to maintain a record of your consents and track those who have opted out of marketing communications, abide by certain regulatory requirements like OFAC restrictions); or

•When we have your consent to do so (e.g., when you opt-in to receive marketing communications from us). When consent is the legal basis for our processing of your personal information, you may withdraw such consent at any time.

Data Subject Requests

You have the right to (1) access your personal information, including in a portable format, (2) request erasure of your personal information, and (3) request correction of inaccurate personal information. In addition, you may have the right to object to certain processing or request that we restrict certain processing. To exercise any of these rights, please contact us at legal@agi.cash.

If you have a concern about our processing of personal information, we encourage you to contact us in the first instance. However, you have the right to lodge a complaint with the Data Protection Authority where you reside. Contact details for your Data Protection Authority can be found using the links below:

•For individuals in the European Union: https://edpb.europa.eu/about-edpb/board/members_en

•For individuals in the UK: https://ico.org.uk/global/contact-us/

•For individuals in Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html

International Transfers

Agicash is based in the United States, and we and our service providers process and store personal information on servers located in the United States and in other countries. Whenever we make restricted international transfers of personal information, we take steps to ensure that your personal information receives an adequate level of protection (by putting in place appropriate safeguards, such as contractual clauses) or ensure that we can rely on an appropriate derogation under data protection laws. Where relevant, you may request access to any safeguard which we use to transfer your personal information outside of the European Economic Area, the United Kingdom, or Switzerland (although we may need to redact data transfer agreements for confidentiality reasons).

Data Retention

We store personal information associated with your account for as long as your account remains active. If you close your account, we will delete personal information related to your account within 30 days; otherwise, we will delete this information after two years of account inactivity. We store other personal information for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Privacy Notice (e.g., certain transaction data is automatically deleted after 24 hours).

Contact Us

If you have questions about this Privacy Notice, please contact Agicash at legal@agi.cash.