Built so it cannot move your money

Observation only.

• No trade execution or cancellation
• No withdrawals or transfers
• No seed phrases or private keys
• Wallets tracked by public address

Least privilege, enforced.

• Permissions checked on connection
• Trading or withdrawal permissions rejected
• Encrypted at rest, never exposed to the browser
• Never logged

Your data is yours.

• Row-level security on every private table
• Server-side authorization on every request
• AI receives only task-relevant data
• CSV export of your data

Defense in depth.

• Rate limiting and input validation
• Security headers and CSP
• Signed webhook verification
• Audit logs for sensitive actions