Legal

Privacy Policy

Vortif has no accounts, no passwords, and no marketing list. This policy explains the little we do handle, and the two places your data genuinely goes.

Last updated 16 July 2026

1. What we do not collect

We do not collect your name, email address, phone number, postal address, date of birth, or government identifiers. There is no signup form to give them to.

We never collect your private keys or seed phrase. Vortif has no code path that requests them and no ability to derive them. We also do not take custody of assets, so we hold no internal balance ledger for you.

2. What we do handle

  • Your public wallet address. Shared when you connect, used to read your positions. It is already public on the block explorer. We store it in a cookie so a connected session survives a page reload - this is a functional cookie, not tracking.
  • Derived portfolio data. Balances, basis, P/L and risk figures are computed from public chain state at request time rather than warehoused as a profile.
  • Queries you type into the advisor. Sent to our model provider to answer them - see below.
  • Ordinary server logs. Our hosting provider records request metadata such as IP address, timestamp and user agent, as any web server does. Used for operating and securing the service.

3. Where your data actually goes

Two disclosures worth reading rather than skimming.

The AI advisor sends your positions to a third-party provider. When you use the advisor or insights desks, a summary of the positions in scope - symbols, quantities, marks, weights, P/L - plus your question is transmitted to a third-party AI provider to generate a response. It is processed under that provider’s terms, not ours. If you would not want a position summary leaving our infrastructure, do not query it.

Your address reaches data providers.Reading chain state means querying a block explorer and a node provider. Those requests necessarily reveal the address being looked up, and our server’s IP, to those providers.

Market data, news and dividend providers receive ticker symbols only - never your address, and never your position sizes.

We do not sell your data, and we do not share it with advertisers or data brokers. There is no advertising on Vortif.

4. Blockchain data is public and permanent

This is a limit on privacy that no policy of ours can fix. Public blockchains are public by design: every balance, transfer and transaction associated with your address is visible to anyone, and cannot be deleted, edited, or made private by us or by you.

Anyone who links your address to your identity can see your entire on-chain history. Vortif does not make this worse - the data was already public - but no request to us can undo it, because we do not control the chain.

5. Cookies

We use a functional cookie to remember your wallet connection across page loads, so a connected session does not flash disconnected on reload. That is its whole job.

We do not use advertising cookies, cross-site trackers, or third-party marketing pixels. Clearing cookies disconnects the session; nothing of yours is lost, because your assets never lived with us.

6. Legal basis and retention

Where the GDPR or similar law applies, we process this data on the basis of performance of a contract (delivering the service you asked for) and legitimate interests (operating and securing it).

We retain no portfolio profile between sessions. Server logs are kept only as long as needed for operations and security, then rotated out by our hosting provider.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, port, or object to the processing of your personal data. Contact admin@vortifai.com to exercise them.

In practice these requests are unusually simple here: we hold no account, so there is very little to produce or erase. We cannot delete anything from the blockchain, and we cannot delete data held by the AI provider or by data providers under their own policies - for those, you would need to approach them directly.

8. Security

Provider and model keys are held in server-side environment variables and never shipped to the browser. The custody and key model is described in full on the Security page.

No system is perfectly secure. We cannot guarantee the security of data transmitted to us, and you use the service at your own risk.

9. Children

Vortif AI is not directed to anyone under 18 and we do not knowingly process their data.

10. Changes and contact

Material changes to this policy will be reflected in the “last updated” date above. Questions or requests: admin@vortifai.com.