Privacy and cookie policy
Last updated: July 3, 2026
This policy describes how TradingAgents handles personal data, cookies, and browser storage when you use our website and signed-in application.
Who we are
TradingAgents is a multi-agent market research application. This policy explains how we collect, use, store, and share personal data when you visit our website, create an account, or run analyses.
The data controller for the service is the operator of this TradingAgents deployment. For privacy requests, contact us at admin@bugfoot.net.
Personal data we collect
Depending on how you use TradingAgents, we may process:
- Account and identity data
- When you sign up or sign in, our authentication provider (Clerk) processes your email address, name, profile image, and authentication identifiers. We sync a subset of this profile to our API database.
- Platform LLM processing
- When you run an analysis, requests are processed through our managed Agents Model using platform API keys we operate. You do not supply provider API keys in the product.
- Analysis and session data
- When you configure or run an analysis, we store session metadata (such as ticker, analysis settings, agent selections, timestamps), generated reports, and related event data linked to your account.
- Optional analysis context
- You may provide optional personal context for a run (for example, investment horizon or constraints). Do not submit sensitive personal data you do not want processed by the LLM provider.
- Technical and usage data
- We automatically collect technical information such as IP address, browser type, device information, and request logs for security, abuse prevention, and service operation.
- Billing data
- If you subscribe, Stripe processes payment method and invoice data. We store subscription plan, interval, status, and period markers so we can enforce access and credit allowances.
Legal bases for processing (EEA/UK)
Where GDPR applies, we rely on the following legal bases:
- Contract — to create and manage your account and provide the analysis service you request.
- Legitimate interests — to secure the service, prevent abuse, improve reliability, and operate essential site functionality.
- Consent — for non-essential cookies or similar technologies where required by law. You can withdraw consent at any time.
- Legal obligation — where we must retain or disclose data to comply with applicable law.
How we use personal data
- Authenticate you and maintain your session.
- Store your profile and subscription/credit metering data.
- Run, persist, and display multi-agent analysis sessions and reports.
- Send analysis requests to our managed Agents Model using platform API keys.
- Protect the service, investigate incidents, and enforce acceptable use.
- Respond to support and privacy requests.
Service providers and third parties
We use trusted processors to operate the service. They may process personal data only on our instructions and subject to appropriate safeguards:
- Clerk — authentication and account management.
- Supabase — application database.
- LLM infrastructure providers — the hosted model capacity behind Agents Model, used to run multi-agent analysis on your behalf with our API keys.
- Stripe — payment processing when you convert a trial or subscribe to a paid plan.
- Hosting and infrastructure providers — to serve the web app, API, and agents service (for example Vercel, Railway, or equivalent in your deployment).
How long we keep data
- Account profile data is kept while your account is active and for a reasonable period afterward unless deletion is requested or required by law.
- Analysis sessions and reports are kept while your account is active unless you delete them or request account erasure.
- Server logs and security records are retained for a limited period appropriate for security and troubleshooting.
- Cookie acknowledgment is stored for up to one year unless you clear cookies earlier.
Security
We apply technical and organizational measures designed to protect personal data, including encrypted storage of platform secrets, authenticated API access, and access controls on backend services. No method of transmission or storage is completely secure; please use a strong, unique password for your account.
International transfers
Your data may be processed in countries other than your own, including the United States, where our service providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms offered by our processors.
Your privacy rights
Depending on your location, you may have the right to access, correct, delete, restrict, or object to certain processing of your personal data, and to data portability where applicable.
If processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise your rights, email us at the contact address above. We may need to verify your identity before responding.
If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.
Children
TradingAgents is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.
Research-only product notice
TradingAgents generates AI-assisted market research for informational purposes only. Outputs are not financial, investment, tax, or legal advice. You are responsible for your own investment decisions.
Changes to this policy
We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may also be communicated through the app or by email where appropriate.