Privacy Policy
Effective date: 3 November 2026. This policy covers every PairSync surface: the marketing website (www.pair-sync.com), the PairSync Terminal (terminal.pair-sync.com), the PairSync iOS app, and the PairSync data API and MCP server (api.pair-sync.com and mcp.pair-sync.com). PairSync publishes statistical research output; it is read-only — no order path, no custody of funds.
The website
The website has no accounts and no sign-in, so it collects no account data. Traffic is measured with Google Analytics (page views, referrers, approximate location, device type; sets cookies) and Vercel Analytics (cookieless aggregate counts). Our hosting provider keeps standard server logs for security and operations. No advertising networks or third-party tracking pixels.
Terminal and iOS accounts
If you create a Terminal account we hold your email and authentication credentials (managed by Clerk — we never see your password), your subscription state (payment is processed by Stripe; card details never touch PairSync servers), and the workspace content you create (watchlists, alerts, journal entries). Your email is used for transactional messages only.
The data API and MCP server
Requests are authenticated with an API key; we check a cryptographic hash of it. OAuth connections from AI assistants wrap your existing key in an encrypted token — we do not store the resulting access tokens. Per call we record usage telemetry: timestamp, truncated key hash, account ID, tool name, a client label derived from the User-Agent, the authentication path, plan tier, any error code, and the requested market or refit date — used for quota enforcement, abuse prevention, and product decisions. A coarse last-used marker is kept per key.
We never receive your conversations. When an AI assistant uses PairSync, only the individual tool call — endpoint name and parameters — reaches our servers; never your prompts, chat history, or files.
What we never do
We do not sell personal data, run advertising networks, store payment card numbers, store AI chat content or OAuth access tokens, hold funds, route orders, or collect brokerage credentials.
Sharing, retention, and your rights
Personal data is shared only with the processors named above (Clerk, Stripe, Vercel, Cloudflare, Google) and with authorities where the law requires it. Account data is kept while your account exists; usage telemetry is kept as operational records. To access, correct, or delete your personal data, email privacy@pair-sync.com — deleting your account also revokes your API keys. Changes to this policy are published here with an updated effective date.