Privacy Policy

• Your sign-in wallet: its Solana address, and, for each version of the Terms you accept, the sign-in message you signed and your signature, which record that acceptance.
• Your agents and their activity: agent names and wallet addresses, the limits and rules you set, quotes, trades, limit orders, grids, approvals, withdrawals, profit and loss, points, quests and referrals.
• Keys and connected apps: API keys and the tokens we issue to apps you connect, stored only as hashes, and the names those apps give themselves.
• Two-factor sign-in: your passkeys' public keys and names, your authenticator app's secret (encrypted), and your recovery codes (stored only as hashes).
• Telegram, if you connect it: your chat ID, Telegram display name and username, the topics you choose, and the messages we send you.
• Technical data: your IP address and the country and region it points to, used for rate limits, security and blocking restricted places. We do not store them with your account. Our hosting provider keeps request logs.
• Analytics: Vercel Web Analytics counts page views without cookies and without following you across sites.
• Anything you send us by email.

We do not ask for your name, email address, phone number or identity documents. If the law ever requires identity checks for a feature, we will tell you before collecting anything.

We use only cookies the Service needs to work: your session (vgr_session, up to 7 days), the sign-in challenge (vgr_siws, 5 minutes), a sign-in waiting for its second factor (vgr_2fa, 5 minutes), and an invite code from a referral link (vgr_ref, up to 30 days). The dashboard keeps which sections you folded in your browser's local storage. We use no advertising or cross-site tracking cookies.

Where the GDPR or UK GDPR applies, we rely on these legal bases:

• To provide the Service you asked for (performance of our contract with you): signing you in, running your agents, checking your limits, executing trades and orders, showing your history and sending the notifications you chose.
• To keep the Service secure and fair (our legitimate interests): rate limits, two-factor sign-in, and detecting fraud, abuse, wash trading and point farming.
• To comply with the law (legal obligation and legitimate interests): sanctions and restricted-place checks, keeping a record of your acceptance of the Terms, keeping fee and accounting records, and answering lawful requests.
• To improve the Service (our legitimate interests): aggregate analytics and error logs.

We do not sell your personal data, share it for cross-context behavioural advertising, or use it to train AI models. We make no decisions with legal or similarly significant effects about you solely by automated means; your agents' limits apply the rules you set.

• Hosting and infrastructure providers, including Vercel (hosting, logs and analytics) and our database host, who process data for us under contract.
• Jupiter and Solana RPC providers, which receive agent wallet addresses and the trade details needed to quote and execute. Transactions are broadcast to the public Solana network.
• Telegram, which carries the notifications we send to your chat.
• The AI apps and agents you connect, which receive what you let them read through the API or MCP, such as balances, trades and orders. Their own privacy policies apply.
• Authorities, courts and professional advisers, where the law requires it or to protect the rights and safety of you, us or others.
• A buyer or successor, if Voyager is reorganised, merged or sold, who must keep to this policy.

Wallet addresses and transactions on Solana are public and permanent. Anyone can see them and link them to each other, and neither we nor anyone else can change or delete them.

Our providers process data in the United States and other countries. Where the GDPR or UK GDPR applies, we rely on adequacy decisions or on the European Commission's Standard Contractual Clauses, with the UK addendum, to protect data that leaves the EEA or the UK.

• Account, agent and trading records: while your account exists and for up to 5 years after your last activity, for legal, tax, accounting and dispute purposes.
• Records of your acceptance of the Terms: as long as we may need to show what you agreed to, and at least as long as the records above.
• Telegram notifications: about a week. Sign-in challenges and pending sign-ins: minutes. Request logs: as our hosting provider keeps them, usually days to weeks.
• A Telegram connection or passkey you remove is deleted when you remove it. A connected app you disconnect is marked as revoked and can no longer act for you; the record that it was connected stays with your account records.

Depending on where you live, and where those laws apply to us, laws such as the GDPR, the UK GDPR and the California Consumer Privacy Act give you rights to access, correct, delete and port your data, to restrict or object to how we use it, and to withdraw consent. Californians also have the right to opt out of the sale or sharing of their data; we do neither. We will not treat you differently for using these rights.

To make a request, email [email protected]. We will ask you to sign a message with your sign-in wallet to show the data is yours. Some data we must keep by law, and data on the blockchain cannot be deleted by anyone. You can also complain to your data protection authority.

Agent wallet keys and authenticator secrets are encrypted with AES-256-GCM, and API keys, app tokens and recovery codes are stored only as hashes. Connections use TLS. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

The Service is not for anyone under 18, and we do not knowingly collect their data.

We will post changes on this page with a new date. If a change is significant, we will also tell you in the dashboard.

Privacy questions and requests: [email protected].