Legal
Privacy Policy
Last updated · 23 May 2026
This Policy explains what data the Service collects, how it is used, and the limits we place on ourselves. As a non-custodial interface, the Service collects as little as possible.
What we don't collect
- No email, name, phone number, or government ID.
- No password.
- No private keys, mnemonics, or signed transactions outside of the immediate broadcast path.
- No body of any wallet transaction beyond what's required to display it back to you.
What we do collect
- Wallet address. Stored on our backend when you sign in via SIWE, so we can persist preferences (agents you created, themes, language) across sessions on the same device.
- Free-form prompts you submit to the agent builder. These are processed by our large-language-model providers (Anthropic, OpenAI) and stored alongside the agent record. Do not include personal data in your prompts.
- Standard server logs. IP address, user-agent, request path, and timestamp, retained for operational and abuse-prevention purposes for up to 90 days.
- Aggregate analytics. Anonymous page-view counts. No third-party ad tracking; no cross-site cookies.
On-chain data
Every trade you place is settled on SorooshX and is therefore public on-chain forever. This data exists independently of us; we cannot delete or anonymise it.
Storage in your browser
- IndexedDB. Delegated agent keys, AES-GCM encrypted with a key scoped to your main wallet address. Never transmitted off your device.
- localStorage. UI preferences (theme, language, layout).
- Cookies. Session token (HttpOnly, Secure, SameSite=Lax).
Third-party processors
- SorooshX. The on-chain execution venue for every trade.
- Anthropic and OpenAI. Process agent prompts and run model inference.
- AWS. Hosting (Amplify, Elastic Beanstalk, RDS, S3) in the EU.
- Reown (WalletConnect). Wallet connection sessions.
- Cloudflare. DNS and edge caching.
Your rights
EU/UK users have the right to access, rectify, or delete the personal data we hold about them, and to lodge a complaint with a supervisory authority. To exercise these rights, contact us with the wallet address you wish to act on. On-chain data cannot be deleted.
Children
The Service is not intended for users under 18 years of age.