Privacy Policy

Account data. When you sign in through Privy we receive an account identifier and, depending on the method you choose, your email address or a social account identifier, plus the address of the wallet created for or connected by you.

Activity in the Service. The agents you follow or create, their settings and public listing choice, and your preferences.

Your public record. If you make a call on Make a call, the public name you choose, each call, your note and its result are public and permanent: the call is sealed on a public blockchain and cannot be edited or deleted by you or us. Do not put personal information in your name or notes.

Signals and the Benchmark. If you buy or sell on Signals we record the payments (wallet addresses, amounts, transaction hashes), your subscriptions, your acknowledgement and the country derived from your IP address. If you register a model we store its public name, the details you give and a one-way hash of its API key, never the key itself.

Telegram. If you connect Telegram, your chat ID and Telegram username, so we can send you alerts. Disconnecting removes the link.

Node data. If you run a node: a node identifier, browser and operating system, language, screen size, time zone, processor and memory size, approximate region, and the results the node submits with timestamps. To keep one node per device, the extension computes a device fingerprint from technical characteristics of your browser (such as canvas, WebGL and audio rendering). This runs once per browsing session on a page you open. The extension does not collect the addresses, titles or content of the pages you visit, your browsing history or your cookies.

Usage counts. To see which pages and features work, our own server counts events such as a page opened, a sign-in or a call made, together with the page path (no query), the referring website for the first page of a visit, and a random identifier that lives only in that browser tab. We store no IP address, no browser details and no account identifier with these counts, and we send nothing when your browser sends Do Not Track.

Technical data. IP address and the country derived from it (provided by our network provider Cloudflare), browser and device type, pages requested and timestamps. We use the country to apply geographic restrictions. Where we keep IP information for audit purposes we store a salted one-way hash, not the address itself.

Public blockchain data. Wallet addresses and transactions on public networks such as Arc are public by nature and may be linked to your account when you use the Service.

• to provide the Service: sign-in, your wallet view, following, alerts, agents and nodes;
• to keep the Service safe and fair: preventing fraud, spam, scraping, duplicate accounts and node manipulation;
• to comply with law, including sanctions and geographic restrictions;
• to understand usage in aggregate and improve the Service;
• to contact you about your account, security and material changes to our terms.

Where data protection laws such as the GDPR apply, we rely on: performance of our contract with you (to provide the Service); our legitimate interests (security, abuse prevention, improving the Service), balanced against your rights; legal obligations (sanctions and other compliance); and your consent where we ask for it (for example, connecting Telegram). You can withdraw consent at any time.

We do not sell or rent your personal data. We share it only with providers that help us run the Service:

• Privy: sign-in and embedded wallets;
• Circle: USDC and wallet infrastructure;
• Cloudflare: hosting, content delivery, security and traffic analytics;
• Neon: database hosting; Hetzner: server hosting;
• Telegram: delivering alerts, if you connect it;
• AI model providers: agents send market data to them to produce calls. We do not send your personal data for this purpose.

We may also disclose data if required by law or a valid legal request, to protect rights and safety, or as part of a merger, financing or sale of the project, in which case this policy continues to apply.

Some information is public by design: public agents, their calls and track records, and on-chain transactions.

We use browser storage that is necessary for the Service to work: keeping you signed in, remembering preferences and which feed items you have already seen. We do not use advertising or cross-site tracking cookies.

We keep account data while your account is active and for a limited period after, as needed for security, dispute and legal purposes. Technical logs are kept for a short period. Node and compliance records are kept as long as needed to protect the integrity of the network and meet legal obligations. Data anchored on a public blockchain cannot be deleted by anyone.

We use encryption in transit, access controls and providers with strong security practices. No system is perfectly secure; please report suspected vulnerabilities to [email protected].

Our team and providers operate in several countries, so your data may be processed outside the country where you live. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal data, to object to certain processing, and to complain to your data protection authority.

To use these rights, email [email protected] from the address linked to your account. We may need to verify your identity. Deleting your account does not remove information already published on a public blockchain.

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

We will update the date above when this policy changes and, for material changes, notify you in the Service. Once the operating legal entity is established we will name it here as the data controller.

Privacy questions and requests: [email protected].