Privacy Policy

We use the information we collect to:

• Provide the Service: Run your agents, compile strategies, compare quotes, route orders, and generate receipts.
• Determine Eligibility: Enforce geographic restrictions and sanctions requirements, including for Stock Token features.
• Manage Your Account: Authenticate access, track credit balances, and process payments.
• Keep the Service Safe: Detect and prevent fraud, market manipulation, security incidents, and violations of our Terms of Service.
• Improve the Service: Analyze usage and agent performance in aggregated form to improve features and model quality.
• Support and Communications: Respond to inquiries and send launch updates, security alerts, and agent notifications.
• Legal Compliance: Comply with applicable laws, regulations, and lawful requests.

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: Vendors who provide hosting, analytics, payment processing, email, wallet connectivity, and customer support, under contractual confidentiality obligations.
• AI Model Providers: Prompts and market context may be processed by third-party AI model providers to generate analysis. We do not send them your private keys or payment details.
• Trading Venues and Networks: To request quotes and execute orders, transaction details are shared with the venues and networks that process them, and transactions are broadcast publicly to the blockchain.
• Published Strategies: If you choose to publish a strategy or track record, it becomes visible to other users.
• Legal Requirements: When required by law or legal process, or to protect our rights, users, or the public.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets.
• With Your Consent: When you explicitly consent to a specific disclosure.

We implement reasonable technical, administrative, and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements for internal systems
• A non-custodial design in which we never hold private keys or user funds
• Agent permission limits enforced by your smart account rather than by our servers
• Security reviews of our systems and smart contracts before launch

No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements:

• Account and Waitlist Information: Retained while your account is active and for a reasonable period afterwards.
• Strategies and Agent Logs: Retained while your account is active so you can review receipts; may be deleted on request, subject to legal obligations.
• Blockchain Data: Transactions recorded onchain are permanent and outside our control.
• Usage Data: Retained in aggregated or de-identified form for analytics.

Depending on your jurisdiction, you may have the right to:

• Access: Request access to the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, except data recorded on a public blockchain or that we must retain by law.
• Portability: Request a copy of your information in a structured, machine-readable format.
• Objection: Object to certain processing, including marketing communications.

To exercise these rights, contact us at support@xidra.app. We will respond within the timeframe required by applicable law.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18, and we will delete such information promptly if we become aware of it.

Your information may be transferred to and processed in countries other than your own, which may have different data protection laws. We take steps to ensure your information receives an adequate level of protection wherever it is processed.

The Service connects to third-party wallets, venues, networks, and websites. We are not responsible for their privacy practices, and we encourage you to review their policies.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date above and notify you of material changes by email or through a notice in the Service. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

If you have questions or requests regarding this Privacy Policy, please contact us at: