This Privacy Policy explains how Wirex Limited (“AgentRex”, “we”, “us”) collects, uses, and protects your personal data when you use the AgentRex mobile application and related services (the “Service”). We are the data controller for the personal data described here, except where we act as a processor on your behalf or where a third-party provider acts as an independent controller (each identified below).
AgentRex is a booking concierge: you describe a trip in plain language, our in-app agent searches travel options, and — only after you confirm each purchase — books it using a payment card linked to a wallet you control. Understanding that flow makes the data practices below clearer.
Controller: Wirex Limited (company number 09334596), 9th Floor, 107 Cheapside, London, United Kingdom, EC2V 6DN. For any privacy question or to exercise your rights, contact us at privacy@agentrex.xyz.
To issue a payment card, our payments partner is legally required to verify your identity (“Know Your Customer”). During this step you provide identity information and documents (for example, legal name, date of birth, nationality, residential address, and a government ID with a liveness/selfie check). This verification is performed by our payments partner and its identity-verification subprocessor — AgentRex does not collect or store your raw identity documents or biometric data. We receive only the result of the check (for example, “approved”) and limited associated status information.
Under UK GDPR and EU GDPR we rely on the following legal bases:
Run the chat agent, search travel, and execute bookings you confirm. Basis: performance of a contract.
Meet anti-money-laundering / KYC obligations through our payments partner. Basis: legal obligation; performance of a contract.
Booking confirmations, invite codes, and essential notices. Basis: performance of a contract; legitimate interests.
Rate-limiting, hashed-IP abuse checks, securing accounts. Basis: legitimate interests; legal obligation.
Diagnose issues, respond to support requests, improve the Service. Basis: legitimate interests.
Tell you when an invitation is available. Basis: consent (you asked to be on the list); you can opt out anytime.
We do not sell your personal data, and we do not use your chat content to serve third-party advertising.
We share personal data with the service providers that make AgentRex work. Each acts under a contract and only for the purposes below. Several are independent controllers of the data you provide directly to them (notably identity verification and payments) — review their own privacy policies for full detail.
Signs you in and manages your non-custodial wallet keys. Receives your email/phone and authentication data.
Verifies your identity (KYC), issues your card, and processes transactions. Receives your identity and payment data directly. Acts as an independent controller for that data.
Performs the document and liveness check on behalf of the payments partner.
Search and fulfil your bookings. Receive the booking and traveller details needed to complete a purchase you confirm.
The in-app agent is powered by a third-party large-language-model provider that processes your chat messages to select travel-search actions.
Sends confirmations and invite emails. Receives your email address and message content.
Hosts our servers and database.
We may also disclose data where required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the Service.
Some providers process data outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as UK International Data Transfer Agreements, the EU Standard Contractual Clauses, or an adequacy decision.
We keep personal data only as long as necessary for the purposes above. Booking and transaction records are retained as required by financial and tax law. Chat history is retained while your account is active. Waitlist data is kept until you ask us to remove it or you join the Service. Identity-verification records are retained by our payments partner under its own AML obligations.
Subject to applicable law, you have the right to access, correct, delete, or receive a portable copy of your personal data; to object to or restrict certain processing; and to withdraw consent where we rely on it. To exercise any of these, email privacy@agentrex.xyz. We will respond within the timeframe the law requires.
Because some of your data (identity verification, card transactions) is held by our payments partner as an independent controller, certain requests may need to be directed to them; we will help you do so.
If you are in the UK or EEA and believe we have mishandled your data, you may complain to your supervisory authority — in the UK, the Information Commissioner’s Office (ICO) at ico.org.uk.
We use technical and organisational measures to protect your data, including encryption in transit, access controls, redaction of sensitive tokens from our logs, and storing only a hashed form of abuse-prevention identifiers. No system is perfectly secure, but we work to protect your information and to limit what we collect in the first place.
The Service is not directed to anyone under 18, and you must be at least 18 (and old enough to hold a payment card in your jurisdiction) to use it. We do not knowingly collect data from children.
We may update this policy from time to time. If we make material changes, we will notify you in the app or by email. The “Last updated” date at the top reflects the current version.
Questions about this policy or your data: privacy@agentrex.xyz.