Privacy Policy

The operator of TradingAgents AI (“TradingAgents”, “we”, “us”, or “our”) is the controller responsible for personal information processed through tradingagents.dev and related services. This policy does not apply to websites, market-data sources, AI providers, or other services that we do not control.

Privacy questions and requests can be sent to support@tradingagents.dev.

• Account information: name, email address, phone number, date of birth, phone-verification status, password hash, and account timestamps. We do not store your password in plain text.
• Verification information: phone number, one-time-code hashes, attempts, and expiry information used to verify your WhatsApp number.
• Research information: tickers, analysis dates, selected analysts and models, prompts or instructions you submit, run status, signals, errors, and generated reports or debate transcripts.
• Bring-your-own-key information: provider names and encrypted API keys. Your secret key is decrypted only as needed to run the analysis you request.
• Preferences: theme, watchlist, and similar settings stored in your browser. Public market-news records do not ordinarily identify you personally.
• Technical and usage information: IP address, request timestamps, browser and device information, rate-limit counters, error traces, and security logs generated by our applications and service providers.
• Advertising measurement information: when the Google Ads tag is enabled, Google may receive page URLs, device and browser information, IP-derived location, and online identifiers. See our Cookie Policy.

• Create, authenticate, protect, and administer user accounts.
• Verify phone numbers and deliver one-time codes through our messaging provider.
• Generate research reports, cache or reuse results, and display analysis history.
• Apply usage limits, prevent abuse, troubleshoot failures, and secure the service.
• Operate public news pages, understand aggregate product use, and measure advertising.
• Respond to support, privacy, security, and legal requests.
• Comply with applicable law and enforce our Terms of Service.

Where data-protection law requires a legal basis, we rely on: performance of our contract or steps you ask us to take before entering a contract; our legitimate interests in operating, securing, and improving the service; compliance with legal obligations; and consent where we specifically request it. Where processing is based on consent, you may withdraw it at any time, without affecting earlier lawful processing.

We disclose information only as reasonably necessary for the service, to protect rights and safety, or as required by law. Recipients may include:

• Cloud infrastructure: Cloudflare for hosting, delivery, and security, and Railway for application, database, queue, and caching infrastructure.
• Communications: Bird and its underlying messaging channels, including Meta WhatsApp, to deliver verification codes.
• AI and data providers: the AI provider you select, platform-funded model providers, and services such as Alpha Vantage, Sharadar, FreeNewsAPI, Yahoo Finance, and SEC EDGAR. Information may be sent to them only to provide requested research or market data.
• Advertising measurement: Google, through the Google Ads tag, as described in the Cookie Policy.
• Professional and legal recipients: advisers, auditors, insurers, authorities, or courts where necessary and lawful, and a successor in a merger, financing, acquisition, or sale of assets.

We do not sell account credentials, research reports, or user-entered API keys for money. Advertising measurement may involve disclosures to Google that are treated as “sharing” under some privacy laws.

We retain account information while your account is active and for as long as reasonably necessary to provide the service, maintain security, resolve disputes, and meet legal requirements. Research runs and cached results may be retained to provide history, reuse, and product functionality. Verification codes and rate-limit records expire after their operational windows. Public news records may be retained indefinitely.

You may request deletion of your account and associated personal information using the contact address above. We may retain limited records where law, fraud prevention, security, or an unresolved dispute requires it. Some aggregated or de-identified information may remain.

We use HTTPS, hashed passwords, encryption for stored BYOK secrets, access controls, rate limits, and service-provider security measures. No internet service can guarantee absolute security. Protect your password, keep your API keys secure, and notify us promptly if you believe your account has been compromised.

Depending on your location, you may have the right to access, correct, delete, restrict, object to, or receive a portable copy of your personal information; withdraw consent; or appeal a decision. You may also have the right to complain to your local data-protection authority.

Send requests to support@tradingagents.dev. We may need to verify your identity before acting. Authorized agents may submit requests where local law permits.

Our service providers may process information in countries other than yours. Where required, we rely on appropriate safeguards such as contractual data-protection terms and provider transfer mechanisms.

The service is intended only for people aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us so we can investigate and remove it.

We may update this policy as the service, providers, or law changes. The effective date at the top identifies the current version. If a change materially affects your rights, we will provide additional notice where appropriate.