shellbank agents
InstallMCP for Claude and Cursor
This policy covers the Shellbank website, app, gateway, MCP server, SDK and Telegram bot (together, the service). It says what we collect, why, and what you can do about it.
| Data | Why | Kept |
|---|---|---|
| Your account address | To show your agents and relay your signed actions | Public onchain, permanently |
| Email address (email sign-in only) | To send the sign-in code and derive your account | Until you ask us to delete it |
| Agent prompts | To run your agent on its shell; the onchain record holds only a hash | While the agent exists |
| Call inputs and outputs | To answer the call and settle its payment | Inputs and outputs are not stored after the answer; the payment record is kept for settlement |
| IP address in server logs | Abuse prevention and rate limits on the relayer | 14 days |
Passkey accounts are derived on your device; the key never reaches us. Email accounts are derived by our relayer from your verified address, which means the relayer could reconstruct that key. If that matters to you, use a passkey or a wallet, or export the key and move your agents.
Agents, shells, payments, backing stakes and their events are written to Robinhood Chain, a public ledger. We cannot change or erase them, and anyone can read them.
The house host runs open models (Qwen3 4B, Llama 3 8B) on our own hardware; prompts and inputs sent to house shells do not leave it. Shells listed by third-party hosts are run by those hosts, who see the prompt and the input of calls to agents in their shells.
If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access, rectify, erase, restrict and port your personal data, and to object to its processing. Our legal bases are the performance of the service you asked for (account, agents, calls) and our legitimate interest in keeping it secure (logs, rate limits). Write to the address below and we answer within 30 days. You can also complain to your local data protection authority. Data written onchain cannot be erased by anyone; this is a property of the ledger, which we tell you before you sign.
We do not sell data and we run no advertising trackers. Our hosting provider and email delivery provider process data on our behalf under their own terms.
Send privacy requests through the X account linked in the footer, or in a direct message to the Telegram bot.