Privacy
What we collect, why, who processes it, and how to ask for a copy or deletion.
Who is responsible
Executor (executor.fun), operated from Brazil. Privacy questions: suporte@executor.fun.
What we collect
- Account: your email or social login and an account ID, handled by Privy.
- Wallets: the public addresses of the wallets in your account and, to unlock the Free plan, whether they hold a coin launched by Executor (public blockchain data). Never private keys: the wallets are non-custodial.
- Trading strategy: the rules you confirmed and the public addresses of the wallets you follow. Any nicknames you give them stay on your device only.
- Trades: the history of buys and sells the engine made in your wallet (what, when, how much, why and the transaction). It is also public on the blockchain.
- Payments: your plan, its status and amounts, and a Stripe customer ID. Card data stays with Stripe, and we never see it.
- Approximate location: country, city and time zone from your IP, through our network provider. We use it to show prices for your country and the local sky and clock. The price band of your country is saved with your subscription so the price stays the same.
- Images in the chat: before leaving your device, each image is redrawn, which removes its location and photo data. It goes with your message to the AI and is not kept on our servers; your encrypted history on the device keeps only a thumbnail.
- Voice in the chat: when your browser can, speech turns into text on the device itself and the audio never leaves it. When it can’t, the app records up to 60 seconds and our server sends the audio to xAI only to turn it into text; we don’t keep the audio or the text. Your browser’s own speech recognition (Google, Microsoft or Apple) is used only if you accept the notice. The text always lands in the message box for you to review before sending.
- AI chat: your messages and images are sent to Anthropic (Claude) to write the reply, or to xAI (Grok) when Claude is unavailable. We don’t keep chat content on our servers, and your history stays encrypted on your device.
- Usage: counters such as messages per week and protection limits, tied to your account or to a scrambled (hashed) IP.
- Notifications: your notification preferences (language, time zone, quiet hours, channels and the type of email account that receives them, never the address), the anti-scam phrase you choose (stored encrypted), an opaque identifier and the in-app notification inbox. If you connect Telegram, we keep the ID of your chat with @ExecutorFunBot until you disconnect or delete your account.
- Notification emails (once sending is switched on): the address is read from Privy, or from Stripe for billing, only at send time, and is never kept in the queue. If an email bounces or is marked as spam, we keep a hash of the address on a block list so we never send to it again. That hash stays even after you delete your account.
- Coins: blockchain data is public by nature. The launched coins page only shows coins whose creator chose to appear.
Why we use it
To run the service, charge for plans, prevent abuse and fraud, answer you and follow the law.
Who processes it for us
- Privy: login, wallets and the limited trading permission.
- Stripe: payments.
- Anthropic (Claude): writes the chat replies. It receives your message, the last messages of the conversation and the images you attach, plus your language and plan so it can answer. Per Anthropic’s documentation, this content isn’t used to train models without permission and is deleted from its systems within 30 days, unless it’s flagged for breaking its usage policy or the law requires keeping it.
- xAI (Grok): writes the chat replies when Claude is unavailable, with the same content, and turns voice into text when the browser can’t do it on the device. Per xAI’s documentation, API requests and responses aren’t used to train models without permission and are deleted after 30 days.
- Upstash: server data (plans, limits, your strategy, the wallet permission and recent trades).
- Solana RPC providers (Helius among them): reading the blockchain, such as balances of the wallets linked to your account, buys by the wallets you follow and the transactions of your trades.
- Jupiter: routing and executing swaps. Your trading wallet’s address goes with each order.
- Cloudflare: network and protection.
- Telegram: delivering alerts, if you connect @ExecutorFunBot.
- Resend and Amazon SES (São Paulo): sending notification emails, once sending is switched on.
- Hostinger: hosting of executor.fun and of the engine’s server, in Germany.
- Vercel: hosting of coin sites.
Some of them process data outside your country, mainly in the United States. Anthropic and xAI handle messages, images and audio under their API terms.
How long we keep it
While your account is active. After you ask for deletion, we erase it within 30 days, except payment records the law requires us to keep.
Your rights
You can ask for a copy, a correction or the deletion of your data, or object to a use, by emailing suporte@executor.fun. We answer within 15 days. These rights follow Brazil’s LGPD and, where it applies, Europe’s GDPR.
Security
We use HTTPS, a strict content security policy, encryption and as little data as possible. We will never ask for your seed phrase or private key. See security.
Changes
We publish any new version here with its date.