Legal

Privacy Policy

Last updated: 23 August 2026

This policy explains how VIA Labs Pte Ltd (“VIA”, “we”, “us”) collects, uses, shares, and protects your personal data when you use the VIA app and the website at app.getvia.xyz (together, the “Service”). VIA is an agentic commerce network: you train a Buying Agent that discovers products, negotiates, and settles purchases on your behalf.

1. Who we are

The data controller is VIA Labs Pte Ltd, a company registered in Singapore (UEN 202606003C), 73 Ubi Road 1, #08-54 Oxley Bizhub, Singapore 408733. For any privacy question or request, contact us at contact@getvia.xyz.

2. Data we collect

We collect the following, depending on how you use the Service:

Account information. Your email address (used to sign you in and to contact you), your chosen handle, and your display name.
Wallet and identity data. The blockchain wallet address you use to fund purchases, a platform-derived agent identity wallet we create for you, and your on-chain agent identity token (ERC-8004 on the Base network). On-chain identities and transactions are public by the nature of the blockchain.
Agent activity. The messages you send to your Buying Agent, the briefs and preferences you give it, and the searches it runs. Your messages are processed by our language-model provider to generate responses (see section 5).
Transactions. Your orders, purchase history, and your credit balance and usage. Card payments are processed by our payment provider; we do not receive or store your full card details. On-chain payments are made in USDC on the Base network.
Notifications. If you turn on notifications, we store the push subscription or device push token needed to deliver them. You can turn notifications off at any time.
Usage and device data. The searches you run, actions you take in the app, standard device and browser information, and an approximate location (country only) derived from your IP address, which we use to determine which storefront to show you.
Back Room content. Content you create in rooms. Any avatar image you upload is kept private to you and is not shared with other members.

3. How your buying intents are shared with sellers

When your agent searches the network, only an anonymised teaser of what you are looking for (such as a category, a product type, and one attribute) is shared with sellers and posted on our open demand rail so that sellers can respond. Your identity, your contact details, and the full text of your brief are never included in that teaser.

4. How we use your data

To provide and operate the Service, including running your Buying Agent and matching you with sellers.
To process payments, manage your credit balance, and deliver what you buy.
To send notifications and service messages you have asked for.
To keep the Service secure, prevent fraud and abuse, and enforce our terms.
To understand and improve how the Service works.
To comply with legal, tax, and regulatory obligations.

5. Who we share data with

We do not sell your personal data. We use third-party companies to run parts of the Service, each acting on our instructions and only for the purpose described. These are:

A cloud database and authentication provider, to store your account and data.
An AI language-model provider, which processes your agent messages to generate responses.
A card payment provider, which handles card payments under its own privacy policy. We do not receive your full card details; for card top-ups we send this provider a one-way hashed form of your IP address for its fraud and compliance checks.
Wallet infrastructure and on-chain settlement providers, to create wallets and settle payments in USDC.
A cloud hosting provider, to serve the app.

We also share data with our affiliated platform Real Real Genuine (realrealgenuine.com), so that you can use the same agent, credits, and history there if you choose to.

We may also share data where required by law, to protect our rights or users, or in connection with a corporate transaction such as a merger or acquisition. Data recorded on a public blockchain (your agent identity and your on-chain transactions) is public and outside our control. You can ask us at any time for the specific providers we use, by emailing contact@getvia.xyz.

6. International transfers

We and our providers may process your data in countries other than your own. Where we transfer personal data across borders, we take steps to ensure it remains protected in line with applicable law.

7. Retention

We keep your personal data for as long as your account is active and as needed to provide the Service. When you delete your account we delete or anonymise your personal data, except where we must keep certain records for legal, tax, or fraud-prevention reasons. Data already written to a public blockchain cannot be deleted.

8. Your rights

You can access, correct, or delete your personal data, and object to or restrict certain processing. You can delete your account and its data from within the app, or by emailing contact@getvia.xyz. We handle personal data in accordance with Singapore’s Personal Data Protection Act (PDPA). If you are in the European Economic Area or the United Kingdom, you also have the rights granted by the GDPR, including the right to lodge a complaint with your local data protection authority.

9. Children

The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will remove it.

10. Security

We use reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top of this page and, where appropriate, notify you in the app.

12. Contact

VIA Labs Pte Ltd, 73 Ubi Road 1, #08-54 Oxley Bizhub, Singapore 408733. contact@getvia.xyz.