Privacy Policy

• Account: email, name, password (hashed), and an optional avatar.
• Trading data: trades, account balances and equity snapshots, and connector status, sent by your MetaTrader Expert Advisor or imported via CSV.
• Agent data: your chat messages with the Financial Agent (kept in full for 90 days, then the message text is deleted), your journal entries and tags, questionnaire answers, and a behavioral profile the agent derives from your activity to personalize its guidance.
• Payments: handled by our payment processors; we store subscription status and, for manual card-to-card payments, a receipt image you submit.
• Usage analytics: only if you accept: page views, web-vitals and feature usage sent to Google Analytics and Plausible, plus a first-party record of product milestones (signup, connecting an EA, your first synced trade, first insight, and when you view or click an upgrade prompt). If you decline, none of it is collected.
• Account and billing records: we always keep a record of payments, subscription changes, password changes and successful logins. These are not analytics (we need them to run your subscription and to keep your account secure), and they are kept whether or not you accept analytics.
• Technical logs: IP address and user-agent on inbound requests, kept short-term for security and debugging.

• Stripe: card payments and subscriptions.
• Google (Gemini) and Groq: the AI models that power the agent. Your prompts and the relevant trading context are sent to generate responses.
• Resend: transactional email (verification, password reset).
• Google Analytics (via Firebase): usage analytics, performance monitoring and web-vitals. Loaded only with your consent. Sets the _ga cookies and can associate activity with your account.
• Plausible Analytics: privacy-focused page-view analytics. Loaded only with your consent. It sets no cookies and builds no cross-site profile, but it does receive your IP address and the page being viewed.
• Cloudflare: content delivery and security.
• Telegram: optional notifications and the manual card-to-card payment flow.

Your account and content (trades, journals, the agent's learned profile) stay for as long as your account is active, so the agent keeps its context.

Your conversations with the Financial Agent are kept in full for 90 days, so the feature works and so we can investigate problems.

After 90 days the message text, the tool inputs and any error detail are deleted. What remains for a further period is a technical record of the exchange (which model answered, which tools it used, how long it took, what it cost), and that record is still connected to your account. It is deleted after 365 days, or immediately if you delete your account.

Separately, we keep a de-identified quality record. It contains none of your messages, no name and no account number, only which model answered, which tools it used, the timing, the cost, and how long the messages were. Turns of the same conversation are grouped using a key we derive with a secret kept outside the database, so these records cannot be linked back to you from the stored data alone. They are not fully anonymous: because we hold that secret, we can still find and delete yours if you ask us to. We keep them to make the agent better.

Technical logs that identify a device (the IP address and browser recorded with an incoming request) are removed after 90 days, while the underlying record is kept. Usage analytics are deleted after 365 days. Financial records may be retained as required by law after deletion, in anonymized form.