Privacy policy

• Account details. Your email address and sign-in details. Authentication is handled by our authentication provider.
• API keys and billing. API keys you create are stored hashed. We also keep your credit balance and purchase history. Card payments are handled by our payment processor; we never see or store card numbers.
• Tool calls. For each call through the API or the MCP connector we record the tool name, the arguments passed (for example a ticker, a date or a screen dimension), the time, the response time, and which client/app made the call. We do not collect the text of your conversations with your AI assistant, and we do not collect the name of the model you use. Before 2 November 2026 the connector asked assistants to send the user's question with each call. We stopped collecting that, and keep earlier records only under the retention period below.
• Web analyst chats. If you use the analyst on capitalsignal.io, the questions you type and the answers are stored in your account so you can return to them.
• Usage and technical logs. IP address, browser or user agent, pages visited, and errors. We collect these through our own analytics and an error-monitoring service.

We use this data to run the service and authenticate you, to charge credits, to prevent abuse, to fix errors, and to understand which data and tools are used so we can improve them. We do not sell your data or use it for advertising.

Anything you submit with lock_call is public and permanent by design. It is shown with the author's public author id: a pseudonym derived from your account (u_ followed by ten characters), plus any label you choose when you lock the call. A locked call cannot be edited or deleted; a correction is a new call that supersedes the earlier one. Do not put private information in a call.

The service and its database are hosted in the EU (Germany). Some of the third-party providers below may process data in other countries, including the United States.

We use the following categories of provider. We do not name individual vendors here.

• A hosting provider, which runs the service and database.
• An authentication and account-email provider.
• A payment processor, which handles card payments.
• Error-monitoring and product-analytics providers.
• AI model providers, which receive questions typed into the web analyst so they can generate answers. Data from MCP connector calls is not sent to them.
• AI model providers used to extract filing data. These work on public ASX announcements only, not on user data.

Account data, API keys, tool-call logs and analyst chats are kept while your account is open. When you ask us to delete your account, we delete them within 30 days, except for records we must keep by law (such as payment records) and public calls-ledger entries. Server and error logs are kept for up to 12 months.

Email damon@asxengine.com from your account email address. We will confirm and delete the account within 30 days. You can revoke API keys yourself in Settings, and you can disconnect the connector in your AI app at any time.

You can ask for access to your data, correction of it, deletion of it, or object to how we use it. Contact damon@asxengine.com. If we change this policy, we will post the new version on this page with a new date.