Privacy Policy

1. Overview

This policy explains what Vega collects, why, and your choices. We aim to collect the minimum needed to run the Service and never sell your personal data.

2. What we collect

• Account data: your email and authentication identifiers, handled by our auth provider (Clerk).
• Strategy data: the strategies, indicators, settings, notes, and preferences you create.
• Chat data: your questions to Vega's agent, its answers, the views it builds and you save, and your decisions on what it drafts (confirmations, edits and any ratings you give).
• Wallet data: your public wallet address and, if you authorize trading, an encrypted trade-only agent key. We never store your main wallet's private key or seed phrase.
• Usage data: product analytics and error logs to keep the Service working and improve it. Analytics events include account identifiers such as your email and, if you enable live trading, trade event metadata (coin, side, size).

3. How we use it

• To provide, secure, and improve the Service.
• To execute trades only when you have explicitly enabled live trading.
• To send transactional and product communications you can opt out of.
• To improve Vega's answers and checks, including by reviewing chats, the decisions you make on what the agent drafts, and your ratings.

4. How agent keys are protected

If you authorize trading, the trade-only agent key is encrypted at rest using authenticated encryption with a per-user derived passphrase. It is only decrypted server-side at the moment an order is signed, and is never returned to the browser or written to logs.

5. Service providers

We share data with infrastructure providers strictly to operate the Service, for example authentication (Clerk), database/hosting (Neon, Vercel), email (Resend), payments (Stripe), embedded wallets (Privy), rate limiting (Upstash), analytics and error monitoring, execution/market data (Hyperliquid), and AI processing (Anthropic), which receives your questions to Vega's agent and the account context needed to answer them: your onboarding answers, plan, and the portfolios and strategies you ask about. Anthropic processes this through its API under its commercial terms, which say it does not use API inputs or outputs to train its models and deletes them within 30 days, unless it must keep them longer to enforce its usage policies or by law. These providers process data on our behalf under their own terms.

6. Cookies and analytics

We use essential cookies for sign-in, and product analytics (PostHog, hosted in the United States) to understand feature usage; see “Usage data” above for what that includes. We do not use cross-site advertising trackers.

7. Data retention and deletion

We keep your data while your account is active. We keep your chats with Vega's agent, the views you save and your decisions on what it drafts while your account is open. Deleting your sign-in alone does not delete this data. To delete it, email us and we erase it from our database within 30 days of your request. Copies in our database provider's backups expire on that provider's schedule, not ours. You may also request an export of your account data by emailing us. Both are currently handled manually, not self-serve. Some records are retained after deletion: in particular, trade audit records are kept as a safety and integrity control for live trading, and records may also be retained where required for security or legal compliance.

8. Your choices

• Disconnect your wallet or revoke trading authorization at any time.
• Opt out of non-essential emails.
• Request access, correction, or deletion of your data.

9. Contact

Privacy questions or requests: support@vegahl.com.