1. Scope & Definition

AARA Orchestration Systems Inc. ("AARA") operates as an "Observer-Level" middleware platform. This Privacy Policy outlines our uncompromising stance on data ingestion, specifically tailored for the Agentic Commerce era under the Universal Commerce Protocol (UCP). By utilizing AARA, you acknowledge that our primary function is the telemetry of autonomous agents, not human individuals.

2. Total PII Exclusion

AARA enforces a Strict No-PII (Personally Identifiable Information) Rule. Our systems are architecturally incapable of storing customer names, physical addresses, email addresses, or payment credentials. Our ingestion engine filters and purges such data at the Edge before persistence.

You represent and warrant that you will not transmit PII through our API. Any inadvertent transmission of PII is subject to immediate automated deletion and AARA shall not be held liable for such data.

3. Agent Telemetry & Fingerprinting

We collect technical telemetry regarding the performance and behavior of AI Agents (e.g., Google Gemini, Claude, ChatGPT). This includes:

• Agent Signature & Header Metadata (User-Agent, X-Agent-ID)
• Negotiation Event Logs (Bid values, offer timestamps)
• UCP Transaction IDs (Tokenized and Non-PII)
• Sub-millisecond latency metrics

4. Limitation of Data Subject Rights

As AARA does not process personal data as defined under GDPR, CCPA, or related frameworks, "Right to Access" and "Right to Erasure" requests are fundamentally inapplicable to our data stores. All stored data is technical telemetry owned by AARA and utilized for the optimization of the Agentic Economy.

5. Data Sovereignty & Observer Role

AARA acts as an independent Observer. We do not act as a data processor for the Merchant's customers. We are a separate data controller for the technical telemetry generated by AI Agents interacting with the Merchant's UCP endpoints.

6. Security & Encryption

We utilize military-grade AES-256 encryption for all data at rest and TLS 1.3 for all data in transit. Our infrastructure is hosted on secure, distributed Edge networks with sub-millisecond recovery protocols.