Privacy Policy

You send us three kinds of content: the queries you ask; if you use portfolio analysis, the portfolio data (holdings, sizes, entry prices) you submit; and, if you enable live trading, the broker connection data needed to place orders on your behalf. Here is exactly what happens to each — what we store, for how long, and who can see it.

We collect the following information:

• Name — Required at signup. Used to identify your account.
• Email address — Optional. Used for account recovery only if provided.
• API key hash — A SHA-256 hash of your API key, used for authentication. We never store your plaintext API key.
• Query content — The questions and prompts you submit to the Service.
• Session data — Conversation sessions including queries and responses.
• Portfolio data — If you use portfolio analysis, the holdings, position sizes, and entry prices you submit. This is data you type in or paste; it is not pulled from a linked broker account.
• Broker connection credentials — If you connect a broker or exchange for live trading, we store the credentials required to act on your behalf: OAuth access and refresh tokens (e.g. Alpaca), API keys (e.g. Kraken, Coinbase), Hyperliquid master and agent wallet addresses with an encrypted agent private key, or for crypto-spot on Base, an encrypted agent-wallet private key plus your configured withdrawal address. Credentials are encrypted at rest; plaintext private keys are never returned after provisioning.
• Usage metrics — Query counts, timestamps, rate limit consumption, and general usage patterns.

If you enable live trading, MarketIntell connects to your broker or exchange using credentials you authorize. Depending on the broker, this may include:

• OAuth tokens — For brokers that use OAuth (e.g. Alpaca), we store access and refresh tokens to place orders on your linked account.
• API keys — For brokers that use API-key auth (e.g. Kraken, Coinbase), we store the key pair you provide.
• Wallet addresses — For on-chain brokers we store addresses you provide or that we generate: your Hyperliquid master wallet address, the per-user agent wallet address, and for crypto-spot, your designated withdrawal address (where funds are sent when you withdraw from the agent wallet).
• Agent-wallet private keys — For Hyperliquid and crypto-spot, we generate a dedicated agent wallet at connect time. The private key is encrypted at rest on our servers and used only to sign trades within the scope you authorize. For crypto-spot, the agent wallet holds tokens you deposit; withdrawals go only to your configured withdrawal address.

We use the information we collect to:

• Provide the Service — Process your queries, return results, and maintain your sessions.
• Improve quality — Analyze usage patterns and anonymized query data to improve AI response quality and platform reliability.
• Prevent abuse — Enforce rate limits, detect automated scraping, and prevent misuse of the Service.

We do not sell your personal data. We do not use your data for advertising.

• Sessions are retained for 90 days from last activity, then automatically deleted.
• Queries may be retained in anonymized form to improve AI response quality. Anonymized data has all personally identifiable information stripped.
• Account data (name, email hash, API key hash) is retained for the lifetime of your account.
• Broker connection data (encrypted credentials, withdrawal addresses, agent-wallet keys) is retained until you revoke the connection or delete your account.
• Usage metrics are retained in aggregate form indefinitely for service monitoring.

To provide the Service, we share data with the following third-party providers:

MarketIntell does not use tracking cookies, advertising cookies, or third-party analytics cookies.

We use localStorage in your browser to store your API key locally for authentication convenience. This data never leaves your device unless you make an API request.

You have the right to:

• Request data export — Receive a copy of the data we hold about you.
• Request deletion — Ask us to delete your account and associated data.
• Revoke your API key — Immediately deactivate your API key, preventing further access.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

We take the security of your data seriously. Our security measures include:

• API key hashing — Keys are stored as SHA-256 hashes. We never store plaintext keys.
• HTTPS only — All communication with the Service is encrypted in transit via TLS.
• Rate limiting — Protects the Service and your account from abuse and brute-force attacks.
• Credential encryption — Broker tokens, API keys, and agent-wallet private keys are encrypted at rest (AES-256-GCM). They are decrypted only in memory when needed to execute a trade or withdrawal.
• Minimal data collection — We collect only what is necessary to provide the Service.

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

MarketIntell is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or your data, please contact us at:

[email protected]