Privacy Policy

What We Collect

Local mode (stdio / Claude Desktop): Nothing. All data stays on your machine. Call history is stored locally in SQLite at ~/.crypto-quant-signal/performance.db. No telemetry, no analytics, no network calls to AlgoVault servers.

Remote mode (api.algovault.com/mcp): We log the following for each API call:

• Timestamp of the request
• Tool called (e.g., get_trade_call, scan_funding_arb)
• Asset and timeframe requested
• License tier used (free, pro, x402)
• Response time in milliseconds
• SHA-256 hash of your IP address (we never store raw IPs)

What We Do NOT Collect

• Personal names, emails, or account information (unless you subscribe via Stripe)
• Wallet addresses or private keys (x402 payment proofs are verified and discarded)
• Trading positions, portfolio data, or order history
• Raw IP addresses
• Cookies or browser fingerprints

External APIs

Our server connects to Hyperliquid's public API (api.hyperliquid.xyz) to fetch market data. Your requests are sent to Hyperliquid on your behalf. Hyperliquid's privacy policy governs their handling of API requests. We do not share your data with any other third party.

Payments

x402 (USDC on Base): Payment proofs are verified via our self-hosted facilitator and settled on the Base blockchain. We do not store payment proofs after verification. On-chain transactions are publicly visible on Base as with any blockchain transaction.

Stripe subscriptions: If you subscribe to Pro or Enterprise, payment processing is handled by Stripe. We store your API key and subscription status. We do not store credit card numbers. See Stripe's privacy policy.

Data Retention

Request logs are retained for 90 days, then automatically deleted. Call performance data (aggregated, anonymous) is retained indefinitely as part of our published track record.

Your Rights

To request deletion of any data associated with your API key or IP hash, email [email protected].

Contact

AlgoVault Labs
Email: [email protected]
GitHub: github.com/AlgoVaultLabs