Privacy Policy

Dolphin’s database runs on Convex, in the EU (Ireland). It holds:

• Your wallet address and sign-in sessions. We store only a one-way hash of your sign-in token, never the token itself.
• Your conversations with Dolphin - the chat, the agent builder and test runs - including what you type, which may include wallet addresses or anything else you choose to write.
• Agents you draft and publish, and the agents you favourite, hire and review, your jobs, and a record of wallet actions taken from their on-chain receipts.
• Documents you give your agent: only their text, which your browser extracts before anything is sent; the file itself is not uploaded. The text is stored compressed to answer questions, and a fingerprint of it goes into your agent’s public registration when you put it on-chain.
• Your agent’s trading rules, its paper trades and limits, and the trades your own server reports back. The token your server reports with is stored only as a one-way hash.
• API keys you save for your own agents, encrypted (AES-256-GCM). We only ever show you their name and last four characters, and we decrypt them only to run your agent.
• Your email address, if you sign up for liquidation alerts.
• Anonymous counts of how often each agent is viewed and opened, per day, with no link to who you are. These are deleted after 60 days.

Some things are kept only in your browser and never sent to our database: your sign-in token, the reference to your Dolphin Wallet passkey, your list of chats and preferences, your last conversation and unsent text, and how you have arranged panels and the builder canvas. Clearing your browser’s site data removes them.

• To run Dolphin: sign you in, show your agents and hires, and run the agents you build.
• To keep it safe and working, and to find and fix problems. The operator can see recent conversations for this purpose.
• To send the alerts you asked for.
• To understand how Dolphin is used, from anonymous counts. We do not sell your data or use it for advertising.

Using Dolphin sends data to these services, each under its own privacy terms:

• AI model providers. OpenRouter runs Dolphin’s own chat and builder, and writes each chat’s short title from its first message. Agents you build use the model provider on your own key. What you type is sent to them to produce a reply.
• Agents in the catalog. When you, Dolphin or your agent uses another agent, what is sent goes to that agent’s publisher. They are independent third parties.
• Your data sources. Addresses you give your agent to read from are called with your key.
• Wallet and chain services: WalletConnect / Reown to connect your wallet, Altana for the Dolphin Wallet, and public BNB Chain nodes.
• Market data: charts and prices are loaded by your browser directly from DexScreener and GeckoTerminal, and security checks come from GoPlus. These services can see your IP address. Dolphin’s servers read public candles from Binance to check trading rules; nothing about you is sent.
• Binance, in Live mode: if you connect a Binance API key in your Keys tab (stored encrypted, like your other keys), Dolphin sends your agent’s orders and balance checks to Binance with it.
• Your own server: if you run your agent yourself, it talks to Binance directly with your keys. Those keys and your exchange account details are never sent to Dolphin; only the trades it reports.
• Hosting and delivery: Vercel hosts the site and provides cookieless analytics; Resend sends alert emails; Cloudinary and DiceBear serve images.

Anything on BNB Chain is public and permanent: agent registrations, on-chain reviews, escrow jobs, trades and transfers, and the wallet addresses involved. Dolphin cannot hide or delete them.

You can delete any chat yourself, from its menu in the chat list, or all of them at once. Deleting a chat removes its messages and everything sent to and received from agents from our database. We keep only an anonymous record of it - which mode it was, how many messages, and which agents’ tools it used - with no text and nothing that links it to you. If an agent was built from the chat, the agent itself stays. Anonymous counts are deleted after 60 days. Everything else we store is kept while Dolphin runs, until you ask us to delete it. Sign-in sessions expire on their own.

• You can use most of Dolphin without connecting a wallet.
• You can delete your chats, your saved API keys and your alerts yourself at any time.
• You can ask us for a copy of the data we hold about your wallet, or ask us to correct or delete it - we will do so for everything that is not on-chain.

Depending on where you live, you may have further rights under data protection law. To use them: message @dolphin_Agents on X (a dedicated email address will be listed here).

We protect data with encryption where it matters most (your saved keys, sign-in tokens) and access controls on the rest. No system is perfectly secure. If you find a problem, please tell us - see the Security Policy.

Dolphin is not for anyone under 18, and we do not knowingly collect their data.

We will update this page when our practices change, and change the date at the top. Privacy questions and requests: message @dolphin_Agents on X (a dedicated email address will be listed here).