Disclaimers

Latch Privacy Policy

Last Updated: November 2025

At Latch, privacy and transparency are fundamental to how we design and operate our protocol. This Privacy Policy explains how we collect, process, and protect data when you use the Latch Protocol, its SDKs, APIs, websites, and related infrastructure (collectively, the “Services”). By accessing or using Latch, you consent to the practices described below.


1. Information We Collect

1.1 Minimal Personal Data

Latch is built as a privacy-preserving protocol. We do not require or collect personal information such as names, phone numbers, or government identifiers. However, depending on how you interact with Latch, we may collect:

  • Email address (for developer registration or communications)

  • Wallet address (for payment routing and verification)

  • Transaction metadata (hashes, timestamps, and related network info)

  • Technical contact info (for registered MCP servers or facilitators)

All wallet and transaction data remain fully on-chain and are not stored or processed by Latch beyond verification needs.


1.2 Non-Personal / Technical Data

We collect limited technical information to maintain and optimize protocol performance, such as:

  • Browser type, operating system, and device information

  • IP region (non-identifiable)

  • Facilitator response times and uptime metrics

  • General usage analytics (e.g., number of API calls, failed requests, latency)

This data is never used for tracking or profiling, and cannot be linked to individual users.


1.3 Analytics Data

Latch uses a privacy-centric analytics system (self-hosted and cookie-free) to understand aggregate usage patterns. We may record:

  • Page views and session counts

  • Interaction events (e.g., API registration, dashboard navigation)

  • Error logs and anonymized telemetry

If cookies or browser storage are used for analytics, you can opt out via the “Cookie Settings” link in the footer.


2. How We Use Data

We use collected data to:

  • Maintain reliable operation of MCP and x402 endpoints

  • Monitor facilitator health and payment verification

  • Improve SDK and developer tools

  • Communicate important updates, including protocol upgrades or policy changes

  • Prevent abuse, spam, or unauthorized use of Services

We do not sell, rent, or trade any data.


3. Data Security

Latch employs modern security standards, including:

  • End-to-end encryption for data transmission (TLS)

  • Hash-based message authentication for facilitator communications

  • Cold storage / key isolation for validator and reward distribution systems

All off-chain data (if any) is stored using encrypted, access-controlled environments.


4. Data Retention

We retain data only as long as necessary to provide the Services or comply with legal obligations. For telemetry or analytics, retention is typically under 90 days. Developers can request data deletion or anonymization by contacting [email protected].


5. Third-Party Services

Latch integrates limited third-party tools that align with our privacy principles:

  • Analytics providers (for anonymized telemetry, optional and self-hosted)

  • Blockchain indexers and explorers (for verifying on-chain x402 transactions)

These providers process data solely to operate the requested services and are contractually required to handle it in accordance with privacy and security standards.


Our website or documentation may reference third-party platforms (e.g., Base, Solana, or x402scan). Latch does not control these sites and is not responsible for their content or data practices. Your interactions with third-party systems are governed by their respective terms and policies.


7. International Data Transfers

Because Latch is a globally distributed network, data may be transmitted or processed across multiple jurisdictions. We ensure all processing complies with applicable privacy frameworks and data protection standards.


8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access and review your data

  • Request correction or deletion

  • Restrict processing or withdraw consent

  • Export your developer data (if applicable)

Requests may be submitted to [email protected] and will be reviewed in accordance with applicable data laws.


9. Changes to This Policy

We may update this Privacy Policy periodically to reflect protocol or legal changes. Updates will be posted at https://latchmcp.app/privacy and take effect 14 days after publication unless immediate enforcement is required for security or compliance reasons.


10. Contact

For privacy or data-related inquiries, please contact: Email: [email protected] Website: https://latchmcp.app

Last updated