Privacy Policy

This policy describes how Prosperity Labs, LLC (prosperitylabs.co) handles information when you use vaults.cash: the website, the mobile apps, the API and MCP server, and any support conversation with us. It applies to the iPhone app in the same way it applies to the website.

Login and account information. When you log in, our wallet provider, Privy, Inc., collects the email address, phone number, or Google or Apple account you choose to log in with, and gives us a stable user identifier and your wallet addresses. We store the identifier and the addresses. We do not store your password (there is none) and we never see your private key.

What you do on the Service. We keep records that the Service needs to work: the targets you set and their rungs, the invite code you were referred by and the code you share, the fees paid on transactions you make, and any agent access keys you create (stored hashed, so we cannot read them back).

Technical information. Our hosting provider, Vercel, records the IP address, browser or app version and pages requested for each visit in ordinary server logs, kept for a limited time for security and debugging. We set one first-party cookie of our own: a 90-day referral cookie so we know who invited you. Privy sets the cookies it needs to keep you logged in. The app also stores a copy of recent public market data and your own positions in your browser to make pages load faster; that copy never leaves your device and is cleared when you log out.

What we do not do. We do not run advertising trackers, we do not sell or rent personal information, and today we run no third-party analytics. If we add a privacy-respecting analytics tool, we will update this page first.

Every transaction you sign is recorded permanently on a public blockchain: your wallet address, the amounts, the positions, the fees. Anyone can read it, we cannot change or delete it, and it is not covered by this policy. If you would rather not link your identity to an address, you can export your key and use the Service from a fresh wallet.

• To provide the Service: show you your positions, build your transactions, run your targets and pay referrals.
• To keep the Service secure and detect abuse.
• To respond when you contact us.
• To meet legal obligations, including sanctions screening if we are required to perform it.

If you are in the European Economic Area or the United Kingdom, our legal bases are performance of our contract with you, our legitimate interests in running and securing the Service, and compliance with law.

We share information only with the providers that run the Service, each under its own privacy terms:

• Privy, Inc. — login and embedded wallets.
• Vercel, Inc. — hosting, server logs, and scheduled jobs.
• Neon, Inc. — the database that stores the records in Section 2.
• Blockchain infrastructure providers, currently Alchemy and Coinbase Developer Platform — they relay your transactions and see the wallet addresses and transaction contents involved.
• Apple and Google — if you use their login or install the app from their stores.

We may also disclose information when the law requires it, to protect the rights and safety of users or the public, or to a successor if the business is sold or reorganized. We do not share it with anyone else.

If you create an agent access key and give it to an AI agent or platform, that platform will see whatever it asks the Service about your account, on your instruction. That is governed by the platform's privacy terms, not ours. You can revoke a key or turn agent access off at any time on the Account page.

Account records are kept while your account exists and for as long afterwards as we need them to resolve disputes, pay referrals already earned, or meet legal requirements. Server logs are kept briefly. Agent keys are deleted when you revoke them.

You can see and export your wallet key on the Account page and stop using the Service at any time; your positions stay in your wallet regardless. To ask what we hold about you, to correct it, or to have your account records deleted, email support at prosperitylabs dot co from the address on your account. We will answer within 30 days. We cannot delete anything already written to a blockchain.

If you live in California, you have the right to know what personal information we collect and how it is used, to request deletion, and not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context advertising. If you live in the EEA or UK, you may also object to or restrict certain processing and complain to your data-protection authority.

We use encryption in transit, keep secrets out of the browser, and limit access to production systems. No system is perfectly secure; keep your login and agent keys safe. The Service is for adults: we do not knowingly collect information from anyone under 18, and we will delete it if we learn we have. Our providers store data in the United States; by using the Service from elsewhere you agree to that transfer.

We will post changes here and update the date at the top; material changes will be announced on the Service first. Questions and requests: Prosperity Labs, LLC · support at prosperitylabs dot co. See also our Terms of Service.