Privacy Policy

Account and identity

Wallets and keys

Trading, agents and configuration

• Orders, swaps, fills, cancellations, slippage and priority-fee settings, and the wallet each instruction came from.
• Positions, balances, realised and unrealised PnL, deposits, withdrawals and internal transfers.
• Paper-trading activity, which is simulated but recorded the same way.
• AI agent and bot configuration: strategy parameters, filters, gates, budgets, paper/live mode, schedules and lifecycle events (created, started, paused, resumed, archived).
• Watchlists, saved filters and presets, tracked wallets and copy-trade targets (including the third-party wallet addresses you choose to follow), tracked X handles, and alert and notification preferences.

Content and communications

• AI chat: the messages you write to the in-app AI agent and to AI-assisted support, and the agent’s replies. See §6 (AI features).
• Support conversations: messages, attachments and metadata you send through in-app support, email or our community channels, including as a signed-out guest.
• Shared content: profit-share cards and any other content you publish or share. A share card is stored at a public URL and bound to your account — see §8 (Public surfaces).
• Anything else you choose to send us: bug reports, feedback, survey answers, and correspondence with our team.

Waitlist and surveys on the Site

• Waitlist: if you join the waitlist or verify your email address on the Site, we store that email address, a one-time verification code (cleared once you verify), your waitlist referral code and, if you arrived through someone’s referral link, who referred you.
• Surveys: if you answer a research survey we send you, we store your answers and any X (Twitter) or Telegram handle and country you choose to give us. With each response we also record the country derived from your IP address and your browser’s user-agent string.

When you use the Services we and our providers collect:

We take deliberate steps to keep sensitive values out of these streams: query strings are stripped from analytics URLs, DOM element attributes are masked in click capture, private-key input fields are excluded from session recording, and vendor error text is replaced by fixed categories rather than forwarded. These are engineering controls, not guarantees — see §14 (Security).

We may de-identify or aggregate information so it can no longer reasonably be linked to you, and use it for any purpose — including volume statistics, market research, benchmarking and product analysis. Where we hold such information we maintain it in de-identified form and do not attempt to re-identify it, except to test that our de-identification works.

These vendors process information on our behalf, under contract, for the purposes we specify. The table reflects our stack at the date of this Policy.

Some information is public by design. See §8 (Public surfaces).

We may disclose information where we believe in good faith that it is necessary to comply with applicable law, regulation, sanctions obligations, legal process or a lawful government request; to enforce our Terms and other agreements; to detect, prevent or address fraud, security or technical issues; or to protect the rights, property or safety of Trenchers AI, our users or the public.

If we are involved in a merger, acquisition, financing, reorganisation, bankruptcy or sale of assets, information may be transferred as part of that transaction or its diligence. We will seek to ensure the recipient honours this Policy, and we will notify you where the law requires it.

We may share information with our auditors, lawyers, accountants and insurers, and with our affiliates and group companies, for the purposes described in this Policy.

We share information where you ask us to — for example when you connect an external service, publish a share card, or use the Services to transact on a public blockchain.

The Trenchers AI web app does not set its own tracking cookies. Instead, it stores data in your browser’s localStorage, sessionStorage and IndexedDB, including:

• your session token and authentication state;
• your language, currency, display and notification preferences;
• saved filters, presets, watchlist and terminal state;
• onboarding and product-tour progress;
• support session identifiers (guest sessions are kept per-tab so a shared browser doesn’t leak one person’s tickets to the next);
• a referral code, if you arrived through a referral link;
• AI consent state (mobile);
• browser-local session wallet material, where you use one.

The mobile app uses the equivalent device storage (AsyncStorage) plus the platform secure store for sensitive values.

The Site keeps the email address you verified for the waitlist in localStorage and sets one first-party cookie, trencher_verified, which expires after 30 days, so a returning visit shows your waitlist status straight away. Neither is used for tracking or advertising.

Third parties embedded in the Services — our authentication provider, analytics provider, support widget, embedded analytics panels and CDN — may set their own cookies or local storage on your device, subject to their own policies.

• Browser controls. Most browsers let you block or delete cookies and site data. Blocking or clearing storage for the Services will sign you out and reset your preferences, and if you use a browser-local session wallet, clearing site data can destroy the only key to any funds it holds — move those funds first.
• Opt out of analytics and recording. See §11 (Your privacy rights), or contact us at support@trenchers.ai.
• Do Not Track. There is no finalised standard for how sites should respond to browser “Do Not Track” signals, and like most sites we do not currently respond to them. Where required by law, we do honour opt-out preference signals such as Global Privacy Control (GPC).
• Mobile. You can reset your advertising identifier or limit ad tracking in your device settings. We do not use advertising identifiers for advertising.

Our legal bases are set out in §3 (How we use your information). You have the rights above under the GDPR and UK GDPR, including the right to lodge a complaint with your local data protection authority.

The controller of your personal data is Trenchers AI, which you can contact at support@trenchers.ai.

For purposes of the CCPA/CPRA, “personal information” includes “sensitive personal information”.

In the preceding 12 months we have collected, and disclosed for a business purpose, the following categories:

• Identifiers (email, user id, wallet address, IP address, device identifiers);
• California Customer Records information (name or username, email);
• Commercial information (trading and transaction activity, fees, rewards);
• Internet or other electronic network activity (usage, analytics, session recordings, support and AI conversations);
• Approximate geolocation (from IP);
• Inferences (product segments and engagement); and
• Account access credentials* (authentication tokens and, for bot wallets, encrypted key material).

* Denotes sensitive personal information, which we use only for the purposes permitted by the CCPA and not to infer characteristics about you.

Sources, purposes and disclosure recipients are described in §2 (Information we collect), §3 (How we use your information) and §7 (How we share your information); retention criteria are in §13 (Data retention).

We do not “sell” or “share” personal information as those terms are defined by the CCPA, and we have not done so in the preceding 12 months. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

California’s “Shine the Light” law lets California residents request details of personal information disclosed to third parties for those parties’ direct marketing purposes. We do not disclose personal information for that purpose.

California residents under 18 with a registered account may request removal of content they posted publicly on the Services. Removal cannot be complete or comprehensive — others may have republished it, and archives we do not control may retain copies. In any event, the Services are not available to anyone under 18 (§16.1 (Children)).

Residents of Virginia, Colorado, Connecticut, Utah, Texas and other states with comprehensive privacy laws have rights of access, correction, deletion, portability, and opt-out of targeted advertising, sale and certain profiling. We do not conduct targeted advertising, sell personal data, or engage in profiling that produces legal or similarly significant effects.

If we decline your request you may appeal by replying to our decision or emailing support@trenchers.ai with “Appeal” in the subject line. We will respond in writing within the statutory period, and if we deny the appeal we will tell you how to complain to your state Attorney General.

Where the Digital Personal Data Protection Act, 2023 applies, you have rights of access, correction, completion, updating, erasure and grievance redressal, and the right to nominate another person to exercise your rights in the event of death or incapacity. To exercise them or raise a grievance, contact support@trenchers.ai.

Our tax reporting features — including the Indian financial-year summary and Schedule VDA export — are computed from your own trade history at your request. They are a convenience, not tax advice, and we do not file anything on your behalf.

If you live in France, you may give general or specific instructions about the retention, deletion and communication of your personal data after your death, appoint someone to carry them out, and modify or withdraw them at any time.

The Services are not intended for anyone under 18, and we do not knowingly collect personal information from children. By using the Services you represent that you are at least 18. If we learn that we have collected information from a child, we will take commercially reasonable steps to delete it. Parents and guardians can contact us at support@trenchers.ai.

The iOS and Android apps follow this Policy, with these differences:

• No session replay. The mobile app does not record sessions.
• Explicit AI consent. Nothing is sent to an AI provider until you agree, and you can withdraw consent in settings (§6 (AI features)).
• In-app account deletion is available in settings (§12 (Deleting your account)).
• Platform permissions. The app requests no location, camera, microphone, contacts or photo-library access. Device biometrics and passkeys are handled by the operating system; we receive only the authentication result.
• Feature availability differs by platform for regulatory and app-store reasons; some trading and rewards features are available only on the web.
• Our App Store privacy details and Google Play data safety disclosures are derived from this Policy.

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. AI agents execute trades according to the configuration you set and approve; that is automation you control, not a decision we make about you.

We may update this Policy. When we do, we will change the “Last updated” date at the top. If we make material changes to how we collect, use or share personal information, we will make reasonable efforts to notify you in advance — by in-app notice, email, or another method the law requires. Your continued use of the Services after an update takes effect means you accept the revised Policy. Material changes to what is shared with AI providers will re-prompt for consent where we rely on consent.

Except where the law says otherwise, if there is any discrepancy between the English version of this Policy and a translation, the English version prevails.

Questions, requests or complaints about this Policy or our privacy practices: