Privacy policy
Last updated: October 5, 2026
tickeragent.ai is operated by MachBits LLC ("we", "us"). This policy describes what we store about you, who else handles it, and how to get it back or have it deleted.
What we store
- Account data: your email address and the way you sign in (an emailed link, or a connected account such as Google where offered). Sign-in and sessions are handled by our authentication provider.
- API keys and connector credentials you save are encrypted at rest, are write-only from the browser (we show only a hint, never the value), and are excluded from logs and error traces.
- Run history and reports: the runs you start, their configuration, token usage, and the generated report artifacts. Private runs are not added to the public library and cannot be read by other users. Our operators can open a run when that is needed to provide support or to investigate abuse.
- Analyst memory: for private runs, a per-account file of your past decisions that later private runs can refer to.
- Scorecard rows grading past calls, and your disclaimer acknowledgment.
- Billing status: if you buy a plan, which plan you have and its billing period. Card details are entered with and held by Stripe; we never see them.
Public reports do not show who asked
Free-tier reports are public by design and show no requester identity— nothing on a public report says who asked for it, and platform runs execute with agent memory off so no run-history residue can surface in one. The call a public report makes is listed on the public record and graded later; that entry shows no requester either. In our own records a public report stays linked to the account that ran it, so that it appears in that account's history and counts against its monthly quota. Only our operators can see that link, and deleting the account removes it.
Who else handles your data
- Our authentication provider runs sign-in and holds your account identity and sessions.
- Stripe processes payments for paid plans.
- Model providers(such as Anthropic, OpenAI or Google) receive the research prompts for a run — the ticker, the market data and the analysts' working text. With your own keys, that is your account with the provider.
- Market data vendors receive the ticker being researched.
- Data connectors you add receive the requests your runs send them, on your own account with that service.
- Our hosting provider stores the database and report files.
- Our DNS and bot-protection provider answers lookups for our domain and, where bot protection is switched on, runs the check shown during sign-up.
Where a provider is not named above, we will tell you which company it is if you ask at the address below.
Cookies and browser storage
We use the cookies our authentication provider needs to keep you signed in, and one browser-storage flag that remembers you dismissed the research disclaimer. We do not run advertising or analytics trackers.
What account deletion removes
Deleting your account erases your sign-in identity, stored keys, connector configurations, sessions, analyst memory, and private runs with their report artifacts and scorecard rows, and cancels any paid plan. Anonymous public reports and their entries on the public record persist — they contain no trace of the deleted account. Stripe keeps its own record of past payments. Backups made before the deletion are kept for up to 30 days and then deleted; if we ever restore from one, we delete the account again.
Getting a copy of your data
Settings has an export that downloads everything we hold on your account: your account record, settings, the runs you started, your scorecard, and the reports you own. Saved keys appear only as the short hint, never the value.
What we don't do
We don't sell your data, and we don't use your private reports or keys for anything other than running the research you asked for. Outbound calls to model providers and data vendors carry only what the run needs.
Contact
Questions about this policy, or a request to see, correct or delete your data that you cannot complete in Settings: hello@machbits.com. Write from the email address on your account so we can confirm it is you.