Privacy Policy
Last updated September 23, 2026
1. What we collect
Account details: your email address, your name if you give one, and a hashed version of your password. We never store your password in readable form.
Sign-in records: when you sign up, sign in or fail to sign in, we record the time, your IP address, the approximate country it maps to, and your device and browser type. We use this to protect accounts, stop abuse and understand how the site is used. You can see your own recent sign-ins on your dashboard.
Usage: counts of things you use that are limited by plan (assistant questions, research runs, and so on), and your saved items.
Assistant conversations: what you type to the assistant is sent to our AI provider to produce an answer. Do not put anything sensitive in it.
Payments: handled by Stripe. We keep a customer reference, your plan and its status and renewal date. We never receive your card number.
Connected accounts: if you choose to connect an exchange, the keys you provide are encrypted before they are stored. Connections start in paper mode.
Messages you send to [email protected].
2. Cookies
We set one essential cookie that keeps you signed in. We do not use advertising or tracking cookies today. Cloudflare, which protects the site, may set security cookies and provides privacy-friendly traffic statistics that do not use cookies. If we ever add advertising, we will update this page and ask before setting anything non-essential.
3. Who handles your data for us
Cloudflare (security, delivery and traffic statistics), UpCloud (hosting, in Frankfurt, Germany), Resend (sending email such as password resets), Stripe (payments), and OpenAI (the assistant). They process data only to provide those services to us. Your data may be processed in the United States and the European Union.
We do not sell your personal information, and we do not share it for advertising.
4. How long we keep it
We keep your account while it is open. Sign-in and security records are kept for as long as needed to protect the service and prevent abuse. If you ask us to delete your account we will remove your personal data, except what we must keep for legal, tax or fraud-prevention reasons.
5. Your choices
You can ask to see, correct, export or delete your data, or object to how we use it, by writing to [email protected]. We aim to reply within 30 days. Depending on where you live, you may have further rights under laws such as the GDPR or the CCPA, and we will honour them.
6. Age and changes
The site is not for anyone under 18, and we do not knowingly collect data from children. We will post any change to this policy on this page and change the date at the top.
Terms · Privacy · Refunds · [email protected]