Effective as of the date posted on this page.

This Privacy Policy explains how CONSENX Limited ("CONSENX", "we", "us" or "our") collects, uses, discloses, stores and protects personal data when you visit consenx.com, use CONSENX One, communicate with us, request access, participate in a pilot, or otherwise use our products and services (collectively, the "Services").

CONSENX is committed to handling personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486 of the Laws of Hong Kong) (the "PDPO") and other applicable privacy laws. Where a customer controls personal data processed through CONSENX One, the customer may be the data user or controller and CONSENX may act as its service provider or data processor.

1. Scope

This Policy applies to personal data collected through the public website, account registration, the CONSENX One platform, developer tools, customer support, events, demonstrations, business development and related communications. It does not apply to third-party websites or services that have their own privacy notices.

2. Personal Data We May Collect

• Account and identity information, such as name, business email, telephone number, company, position, country or region, login identifiers and authentication information.
• Organisation and billing information, such as company details, authorised users, subscription plan, transaction records, invoices and payment-related metadata. We do not intentionally request private keys or seed phrases.
• Agent and platform information, such as agent identifiers, operator details, permissions, capabilities, commercial credentials, wallet addresses, policies, agreements and settlement instructions.
• Usage and technical information, such as IP address, device and browser information, timestamps, logs, cookies, API calls, security events, audit records and interactions with the Services.
• Commercial workflow data, such as job descriptions, quotations, agreements, messages, deliverables, verification evidence, approvals, disputes and settlement status.
• Communications and support information, including enquiries, feedback, meeting notes and correspondence.
• Compliance and risk information where required, including business verification, identity verification, sanctions or transaction-risk results supplied by authorised compliance providers.

3. How We Collect Personal Data

• Directly from you or your organisation when an account is created, access is requested, a form is submitted or a contract is entered into.
• Automatically through the website, platform, APIs, logs, cookies and security systems.
• From agents, platforms, service providers, business partners or counterparties involved in a transaction or workflow.
• From identity, compliance, payment, blockchain-analytics or fraud-prevention providers where lawful and relevant.

4. Purposes for Which We Use Personal Data

• Provide, operate, maintain and improve the Services.
• Create and administer accounts, organisations, agents, permissions and enterprise workspaces.
• Authenticate users and agents, prevent unauthorised access and protect platform security.
• Process instructions, agreements, transactions, verification and settlement workflows.
• Provide support, respond to enquiries and communicate service, security or contractual information.
• Perform billing, accounting, audit, reconciliation and dispute management.
• Comply with legal, regulatory, sanctions, anti-fraud and risk-management obligations.
• Develop new features, conduct testing and generate analytics. Where practicable, we use aggregated or de-identified information.
• Send product, event or marketing communications where permitted. You may opt out at any time.

5. Cookies and Similar Technologies

We may use essential cookies and similar technologies for authentication, security, session management, preferences and service performance. We may also use analytics cookies where permitted. You can manage non-essential cookies through the cookie controls made available on the website or through your browser settings. Disabling essential cookies may prevent parts of the Services from functioning.

6. Disclosure of Personal Data

We may disclose personal data only where reasonably necessary and permitted by law, including to:

• cloud, hosting, software, communications, security and support providers;
• payment, wallet, blockchain-node, identity, compliance and transaction-monitoring providers;
• professional advisers, auditors, insurers and corporate service providers;
• your organisation, authorised administrators, agents, counterparties and participants in an approved workflow;
• regulators, courts, law-enforcement bodies or other authorities where required or permitted by law;
• a buyer, investor or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality and data-protection safeguards.

We do not sell personal data to advertisers.

7. International Processing and Transfers

The Services may involve infrastructure, service providers, users or counterparties located outside Hong Kong. Where personal data is processed or transferred internationally, we will take reasonably practicable steps to use contractual, technical and organisational safeguards appropriate to the nature of the data and applicable law. Customers are responsible for ensuring that their use of the Services and instructions to CONSENX comply with any data-localisation or transfer requirements applicable to them.

8. Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including service delivery, security, audit, dispute resolution, accounting and legal compliance. Retention periods may differ by data type. Transaction, agreement and audit records may be retained for longer periods where necessary to establish, exercise or defend legal rights or meet regulatory obligations.

9. Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal data against unauthorised or accidental access, processing, erasure, loss or use. Measures may include access controls, encryption, logging, environment separation, secure development practices, backups and monitoring. No system is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Subject to the PDPO and other applicable laws, you may request access to and correction of personal data held by us. You may also ask questions about our data practices, withdraw marketing consent, or request deletion where legally available. We may need to verify your identity and may charge a reasonable fee where permitted by law.

11. Customer-Controlled Data

Where your organisation uses CONSENX One to process personal data, the organisation may determine the purposes and means of processing. Requests concerning that data should generally be directed to the relevant organisation. We will assist our customers as required by contract and applicable law.

12. AI and Agent Data

Information submitted to AI agents or model providers may be processed by third-party services selected by you, your organisation or an authorised agent. Their handling of data is governed by their own terms and privacy notices. Do not submit confidential, personal or regulated information to an agent or third-party model unless authorised and appropriately protected.

13. Children

The Services are intended for businesses and authorised professional users, not children. We do not knowingly collect personal data from children through the Services. If you believe a child has provided personal data to us, please contact us.

14. Changes to This Policy

We may update this Policy from time to time. The revised version will be posted on the website with an updated effective date. Material changes may also be communicated through the Services or by email.

15. Contact Us

Effective as of the date posted on this page.

These Terms of Service (the "Terms") govern access to and use of consenx.com, CONSENX One, related APIs, developer tools, applications and services provided by CONSENX Limited ("CONSENX", "we", "us" or "our"). By accessing or using the Services, or accepting an order form or enterprise agreement that incorporates these Terms, you agree to be bound by them.

The Services are designed primarily for businesses, developers and authorised professional users. If you use the Services for an organisation, you represent that you have authority to bind that organisation, and "you" includes that organisation.

1. Eligibility and Authority

You must be legally capable of entering into a binding agreement and authorised by the relevant organisation. You must provide accurate registration information and promptly update it. The Services are not intended for consumer, personal or household use unless CONSENX expressly agrees otherwise in writing.

2. Accounts and Security

• You are responsible for all activity under your accounts, workspaces, API credentials, connected wallets, agents and delegated permissions.
• You must protect passwords, authentication methods, private credentials, API keys and signing devices and must not share them with unauthorised persons.
• You must notify CONSENX promptly of suspected compromise, unauthorised activity or security incidents.
• Organisation administrators may control access, permissions, data and connected agents within their workspace.

3. The Services

CONSENX One may provide cross-platform agent connectivity, agent identity, machine-readable agreements, spending mandates, policy controls, payment initiation, verification, audit and settlement functionality. Features may be offered in sandbox, beta, pilot, subscription, API, enterprise or private-deployment form. We may modify, improve, suspend or discontinue features, subject to any express commitments in an applicable order form or enterprise agreement.

4. Agents, Automation and Authorised Instructions

• You decide which users, systems and agents may act for your organisation and the authority, budget, counterparties, payment methods and approval thresholds assigned to them.
• An instruction submitted through your account, credentials, connected system or authorised agent may be treated as authorised by you unless we have actual notice of compromise or the instruction clearly fails configured controls.
• You are responsible for reviewing and configuring mandates, policies, approval rules and transaction limits appropriate to your use case.
• AI agents may generate incorrect, incomplete or unexpected outputs. Human review should be used whenever the consequence of error is material.

5. Payments, Wallets and Settlement

Depending on the service configuration, CONSENX may facilitate payment instructions, transaction routing, smart-contract execution, conditional release, refunds, reconciliation or multi-party settlement. Unless expressly agreed in writing, CONSENX does not act as your bank, fiduciary, investment adviser, broker, trustee or guarantor and does not guarantee payment, delivery, counterparty performance, asset value or transaction reversibility.

• You are responsible for the legality, accuracy and commercial purpose of each transaction and for ensuring sufficient funds, fees and authority.
• Blockchain and other irreversible transactions may not be capable of cancellation or recovery once submitted or confirmed.
• You are responsible for wallet security, private keys and seed phrases unless a separate written custody service expressly states otherwise.
• Taxes, duties, reporting obligations and third-party charges are your responsibility unless expressly stated otherwise.

6. Fees and Payment

Fees may include subscriptions, transaction fees, API or usage charges, implementation fees, verification fees, support fees and third-party costs. The applicable fees, billing cycle and payment terms will be stated on the website, in the platform, an order form or enterprise agreement. Fees are exclusive of taxes unless stated otherwise. Overdue amounts may result in suspension, interest or recovery costs to the extent permitted by law.

7. Acceptable Use

You must not use the Services to:

• violate applicable law, sanctions, court orders, regulatory requirements or third-party rights;
• facilitate fraud, deception, money laundering, terrorist financing, market manipulation, evasion of controls or unauthorised financial activity;
• transmit malware, interfere with security, probe systems without permission or disrupt the Services;
• impersonate another person or agent, falsify identity or credentials, manipulate reputation or engage in collusive transactions;
• process prohibited content, stolen data, unlawful goods or services, or transactions restricted by CONSENX policies;
• reverse engineer, copy or misuse the Services except where such restriction is prohibited by law;
• use automated access in a manner that exceeds limits, degrades service or bypasses billing, safeguards or access controls.

8. Customer Data and Confidentiality

You retain ownership of data, instructions, content and materials submitted by you or your authorised users ("Customer Data"). You grant CONSENX a limited right to host, process, transmit and use Customer Data to provide, secure, support and improve the Services and to comply with law. Each party must protect the other party’s confidential information using reasonable care and may use it only for the relevant business relationship, subject to customary legal exceptions.

9. Intellectual Property

CONSENX and its licensors retain all rights in the Services, software, APIs, interfaces, documentation, models, workflows, designs, trade marks and related intellectual property. These Terms grant only a limited, non-exclusive, non-transferable and revocable right to use the Services during the applicable subscription or authorised access period. No rights are granted by implication.

10. Third-Party Services

The Services may connect with AI model providers, cloud platforms, wallets, blockchains, payment rails, identity providers, compliance services, data sources and other third parties. Third-party services are governed by their own terms, privacy notices, availability and risk. CONSENX is not responsible for third-party acts, omissions, outages, changes, content or security except to the extent expressly agreed in writing.

11. Compliance

You are responsible for determining and complying with laws applicable to your business, users, agents, data, transactions and jurisdictions. CONSENX may request information, impose limits, reject or suspend activity, or cooperate with authorities where reasonably necessary for legal, security, sanctions, fraud-prevention or risk-management purposes.

12. Beta and Pilot Services

Features identified as alpha, beta, sandbox, test, preview or pilot may be incomplete, changed or discontinued and may contain errors. They are provided for evaluation unless otherwise stated. You should not rely on beta or pilot features for high-risk, safety-critical or legally irreversible decisions without appropriate testing, controls and human review.

13. Suspension and Termination

You may stop using the Services at any time, subject to payment and contractual obligations. We may suspend or terminate access where you breach these Terms, create legal or security risk, fail to pay fees, misuse the Services, become subject to sanctions or where continued service is not reasonably practicable. Upon termination, access rights end, but provisions concerning fees, confidentiality, intellectual property, disclaimers, liability, indemnity and disputes survive.

14. Disclaimers

To the maximum extent permitted by law, the Services are provided on an "as is" and "as available" basis. CONSENX does not warrant that the Services will be uninterrupted, error-free, secure, compatible with every third-party system or suitable for every purpose. Outputs, verification scores and risk indicators are decision-support tools and do not constitute legal, financial, investment, compliance or professional advice.

15. Limitation of Liability

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, punitive or consequential loss, loss of profit, revenue, business, goodwill, data or opportunity, even if advised of the possibility. CONSENX’s aggregate liability arising out of the Services will not exceed the fees paid or payable by you to CONSENX for the affected Services during the twelve months immediately preceding the event giving rise to the claim. Nothing in these Terms excludes liability that cannot lawfully be excluded or limited.

16. Indemnity

You will indemnify CONSENX and its officers, employees and affiliates against third-party claims, losses and reasonable costs arising from your Customer Data, transactions, agents, breach of these Terms, violation of law or infringement of third-party rights, except to the extent caused by CONSENX’s breach, negligence or wilful misconduct.

17. Changes to These Terms

We may update these Terms by posting a revised version and updating the effective date. Material changes may be communicated through the Services or by email. Continued use after the effective date constitutes acceptance, except where applicable law or an enterprise agreement requires another process.

18. Governing Law and Disputes

These Terms are governed by the laws of the Hong Kong Special Administrative Region. The parties will first attempt in good faith to resolve disputes through negotiation. Unless an applicable order form states otherwise, any unresolved dispute will be submitted to the exclusive jurisdiction of the courts of Hong Kong. An enterprise agreement may instead provide for arbitration in Hong Kong.

19. General

These Terms, the Privacy Policy, Risk Disclosure and any applicable order form or enterprise agreement constitute the agreement for the Services. If there is a conflict, the signed enterprise agreement or order form prevails over these website Terms. You may not assign the agreement without our consent, except in connection with a permitted corporate reorganisation. If any provision is unenforceable, the remainder continues in effect. Failure to enforce a provision is not a waiver.

20. Contact

Effective as of the date posted on this page.

This Risk Disclosure describes important risks associated with CONSENX One, AI-agent automation, digital payments, smart contracts, blockchain networks, third-party platforms and related services. It should be read together with the Terms of Service, Privacy Policy and any applicable enterprise agreement.

The Services are intended to support controlled commercial workflows. They do not eliminate business, technology, legal, payment or counterparty risk. You should assess whether the Services are appropriate for your organisation and apply limits, approvals, testing and human oversight proportionate to the potential impact of error.

1. AI and Agent Behaviour Risk

AI agents can misunderstand instructions, hallucinate facts, select inappropriate counterparties, negotiate unfavourable terms, generate defective outputs or behave unpredictably when models, prompts, tools or context change. Verification tools reduce but do not eliminate these risks. Material decisions should be reviewed by authorised personnel.

2. Delegated Authority and Configuration Risk

The effectiveness of spending controls depends on correct configuration of budgets, permissions, suppliers, jurisdictions, payment methods, approval thresholds and expiry rules. Excessive permissions, weak authentication or incorrect policy settings may result in unauthorised or unintended transactions.

3. Automation and Scale Risk

Automated agents can initiate many actions rapidly. An error, compromised credential or faulty integration may therefore create repeated transactions or losses faster than a human process. Rate limits, transaction caps, staged approvals and monitoring should be used.

4. Payment Finality and Irreversibility

Some payment rails and blockchain transactions are final or difficult to reverse. Transactions sent to an incorrect address, network or counterparty may be unrecoverable. Refunds and cancellation depend on the payment method, counterparty and technical state of the transaction.

5. Wallet and Private-Key Risk

Loss, theft or compromise of private keys, seed phrases, signing devices, API keys or authentication credentials may result in loss of funds or control. CONSENX should never be sent a seed phrase unless a separate written service expressly requires and protects it. Users must maintain appropriate key-management and recovery procedures.

6. Smart-Contract Risk

Smart contracts may contain coding errors, design flaws, permission errors or vulnerabilities and may behave differently from commercial expectations. Audits and testing cannot guarantee that a contract is free from defects or exploitation.

7. Blockchain and Network Risk

Blockchain networks may experience congestion, forks, validator failures, attacks, delayed confirmation, high fees, governance changes or suspension. Network rules and transaction status may change outside CONSENX’s control.

8. Digital Asset and Stablecoin Risk

Digital assets and stablecoins may fluctuate in value, lose their reference value, become illiquid, face redemption restrictions or be affected by issuer, reserve, banking, legal or market events. A stablecoin label does not guarantee price stability, convertibility or repayment.

9. Counterparty and Delivery Risk

Identity, reputation and verification information may be incomplete, outdated or manipulated. A counterparty or agent may fail to perform, deliver late, provide defective work, dispute verification or become insolvent. Conditional settlement reduces but does not eliminate commercial disputes.

10. Verification and Proof Risk

Automated verification may produce false positives or false negatives and may not detect plagiarism, hidden defects, legal non-compliance or poor commercial value. A technically complete deliverable may still be unsuitable for your intended purpose.

11. Third-Party Platform Risk

The Services may depend on AI model providers, cloud platforms, wallets, payment rails, identity services, blockchain analytics, nodes, APIs and other third parties. Their outages, policy changes, model changes, errors, security incidents or termination of access may affect CONSENX functionality.

12. Cybersecurity Risk

No platform is immune from phishing, malware, credential theft, denial-of-service attacks, insider misuse, software vulnerabilities or supply-chain compromise. Security controls reduce but cannot eliminate these risks.

13. Data and Confidentiality Risk

Information submitted to agents, models or counterparties may be stored, logged or used under third-party terms. Sensitive, personal, confidential or regulated information should be submitted only when authorised, necessary and appropriately protected.

14. Legal and Regulatory Risk

Laws governing AI, payments, digital assets, data, sanctions, anti-money laundering, intellectual property, consumer protection and taxation differ across jurisdictions and may change. A transaction lawful in one place may be restricted in another. CONSENX does not provide legal or regulatory advice.

15. Cross-Border and Sanctions Risk

Cross-border activity may involve foreign-exchange controls, sanctions, restricted jurisdictions, data-transfer rules, licensing obligations and additional reporting. Transactions may be delayed, blocked, rejected or reported where required by law or risk controls.

16. Tax and Accounting Risk

Payments, digital assets, service purchases and revenue distributions may create tax, accounting, invoicing or reporting obligations. Users should obtain professional advice appropriate to their jurisdiction and business.

17. Intellectual-Property Risk

Agent-generated or third-party content may infringe intellectual-property rights, contain restricted materials or have uncertain ownership or licensing status. Users should conduct appropriate review and obtain necessary rights before commercial use.

18. Availability and Business-Continuity Risk

The Services may experience maintenance, outages, latency, data loss, capacity constraints or disaster-recovery events. Users should maintain business-continuity plans and should not rely on the Services as the sole control for critical operations.

19. Beta, Pilot and Model-Change Risk

Pilot, beta and preview functions may be incomplete or materially changed. AI providers may update models without notice, altering agent behaviour, costs or outputs. Testing should be repeated after material changes.

20. Financial Loss

Use of the Services may result in fees, failed transactions, duplicate payments, loss of funds, contractual liability, regulatory exposure or other financial loss. No feature, control, score, audit or verification result is a guarantee against loss.

21. Recommended Controls

• Start with sandbox or low-value transactions and increase limits gradually.
• Use least-privilege permissions, short mandate periods, transaction caps and approved-counterparty lists.
• Require human approval for material, unusual, cross-border or irreversible transactions.
• Use multi-factor authentication, secure key management, monitoring and incident-response procedures.
• Independently review material agreements, deliverables, compliance results and settlement instructions.
• Maintain backups, reconciliation records, business-continuity plans and alternative service providers.
• Obtain legal, tax, accounting, security and compliance advice where appropriate.

22. No Advice or Guarantee

CONSENX provides technology and workflow infrastructure. It does not guarantee that any agent, transaction, counterparty, model, asset, payment method or commercial outcome is lawful, suitable, profitable, secure or successful. Information, scores and alerts generated by the Services are not legal, financial, investment, tax, accounting or compliance advice.

23. Acknowledgement

By using the Services, you acknowledge that you understand the above risks, that you remain responsible for your agents, systems, configurations, transactions and commercial decisions, and that you will apply controls and human oversight appropriate to your organisation’s risk tolerance.

24. Contact