Drift

Privacy Policy

Last updated July 23, 2026. This is a draft prepared for early access. It has not yet been reviewed by a lawyer and should not be treated as final before Drift accepts real subscribers.

1. Who we are

Drift is operated by Agenta AI PTE LTD ("Drift," "we," "us"), based in Singapore. This policy explains what personal data we collect, why, and what rights you have over it.

2. What we collect

  • Account data: your email address and a securely hashed password (we never store your actual password).
  • Portfolio data: the tickers, share counts, and optional cost basis you choose to record, plus tickers you add to a watchlist.
  • Generated data: the daily price history and weekly/daily digests Drift computes from your portfolio data.
  • Payment data: if you subscribe to a paid plan, your email is shared with LemonSqueezy to process payment. Drift never receives or stores your card details; LemonSqueezy handles that as our payment processor and Merchant of Record.

We don't use tracking cookies, advertising pixels, or third-party analytics.

3. Who else sees your data

Three services process data on our behalf, each for a specific, limited purpose:

  • OpenRouter / Anthropic: generates your digest's written narrative. Receives your portfolio's computed statistics and ticker symbols, not your name, email, or account identity.
  • Finnhub: supplies market data (prices, sector, news, analyst consensus). Receives ticker symbols only.
  • LemonSqueezy: processes subscription payments. Receives your email and handles your payment details directly; we never see your card number.

We do not sell your data to anyone, for any reason.

4. Why we're allowed to process this

We process your account and portfolio data because it's necessary to provide the Service you've signed up for (contractual necessity), not because we've asked for advertising-style consent, since we don't use your data for that.

5. How long we keep it

We keep your data for as long as your account exists. If you delete your account, your holdings, watchlist, and digest history are permanently deleted immediately (see Section 7).

6. Security

Passwords are hashed (never stored in plain text). Access to the Service requires a signed session token. No system is perfectly secure, but we take reasonable measures to protect your data.

7. Your rights

Depending on where you live (including under the GDPR and CCPA), you have the right to:

  • Access the personal data we hold about you.
  • Delete your account and all associated data. Do this any time from your account page (Danger zone → Delete account). This is immediate and permanent.
  • Correct inaccurate data. Most account/portfolio data can be edited directly in the app.
  • Object to or restrict certain processing, or request a copy of your data in a portable format.

To exercise a right this page doesn't already give you a direct tool for, emailtech@agenta-ai.com.

8. Children

Drift isn't directed at anyone under 18, and we don't knowingly collect data from them.

9. Changes

We'll update the date above whenever this policy changes, and post the updated version here.

10. Contact

Questions about this policy or your data: tech@agenta-ai.com.