An application (App)-BOT, scans a context of a user of an application and obtains current scanned user data. The App BOT determines a set of user information entities from the scanned user data containing current information about the user. In a negotiation phase, the App BOT a data access request offer from a mixed reality data (MRD)-BOT. A privacy leak score is estimated that represents a user value attributed to the permission to access the labelled user information entity based on the data access request offer. Responsive to determining that the privacy leak score exceeds a privacy leak score threshold, an acceptance of the data access request offer is sent to the MRD BOT and providing access requested by the data access request. Otherwise, a counteroffer is sent to the offer to the MRD BOT.