Privacy Policy

1. Overview

This policy explains what Vega collects, why, and your choices. We aim to collect the minimum needed to run the Service and never sell your personal data.

2. What we collect

• Account data — your email and authentication identifiers, handled by our auth provider (Clerk).
• Strategy data — the strategies, indicators, settings, notes, and preferences you create.
• Wallet data — your public wallet address and, if you authorize trading, an encrypted trade-only agent key. We never store your main wallet's private key or seed phrase.
• Usage data — product analytics and error logs to keep the Service working and improve it. Analytics events include account identifiers such as your email and, if you enable live trading, trade event metadata (coin, side, size).

3. How we use it

• To provide, secure, and improve the Service.
• To execute trades only when you have explicitly enabled live trading.
• To send transactional and product communications you can opt out of.

4. How agent keys are protected

If you authorize trading, the trade-only agent key is encrypted at rest using authenticated encryption with a per-user derived passphrase. It is only decrypted server-side at the moment an order is signed, and is never returned to the browser or written to logs.

5. Service providers

We share data with infrastructure providers strictly to operate the Service — for example authentication (Clerk), database/hosting (Neon, Vercel), email (Resend), analytics and error monitoring, and execution/market data (Hyperliquid). These providers process data on our behalf under their own terms.

6. Cookies and analytics

We use essential cookies for sign-in, and product analytics (PostHog, hosted in the United States) to understand feature usage — see “Usage data” above for what that includes. We do not use cross-site advertising trackers.

7. Data retention and deletion

We keep your data while your account is active. You may request export or deletion of your account data by emailing us — these are currently handled manually, not self-serve. Some records are retained after deletion: in particular, trade audit records are kept as a safety and integrity control for live trading, and records may also be retained where required for security or legal compliance.

8. Your choices

• Disconnect your wallet or revoke trading authorization at any time.
• Opt out of non-essential emails.
• Request access, correction, or deletion of your data.

9. Contact

Privacy questions or requests: support@vegahl.com.