Skip to content
Drift

Privacy Policy

Last updated July 30, 2026.

1. Who we are

Drift is operated by AGENTA AI PTE. LTD. ("Drift," "we," "us"), based in Singapore. This policy explains what personal data we collect, why, and what rights you have over it.

2. What we collect

  • Account data: your email address. Sign-in and credentials (including your password, if you use one) are handled entirely by our authentication provider. Drift's own systems never receive or store your password, hashed or otherwise. If you sign up with Google, we never see a password at all.
  • Portfolio data: the tickers, share counts, and optional cost basis you choose to record, plus tickers you add to a watchlist.
  • Generated data: the daily price history and weekly/daily digests Drift computes from your portfolio data.
  • Payment data: if you subscribe to a paid plan, your email is shared with LemonSqueezy to process payment. Drift never receives or stores your card details; LemonSqueezy handles that as our payment processor and Merchant of Record.
  • Usage data: which features you use (for example, adding a holding or generating a digest) and when, tied to your account, so we can tell whether the product is actually helping people and where to improve it. This isn't collected through a tracking cookie or a separate tracking script. It's a record of the same authenticated actions you're already taking in the app.

We don't use tracking cookies, advertising pixels, or third-party analytics, and we never sell or share this usage data with anyone. It's recorded and kept entirely on our own infrastructure (see Section 3; no new provider is involved), and it's permanently deleted along with everything else when your account is (see Section 7).

3. Who else sees your data

A small number of service providers process data on our behalf, each for a specific, limited purpose, and none are permitted to use your data for their own purposes:

  • Our authentication and database provider: stores your account, portfolio, and digest data, and handles sign-in. This is the one provider with access to your data as a whole, since it's where the Service's data actually lives.
  • Our cloud hosting provider: runs the Service. Sees data only as it passes through in the course of handling your requests.
  • Market-data providers: supply prices, sector classifications, news, and earnings dates. Receive ticker symbols only, never your name, email, or account identity.
  • An AI service: generates your digest's written narrative. Receives your portfolio's computed statistics and ticker symbols only, not your name, email, or account identity.
  • LemonSqueezy: processes subscription payments as our payment processor and Merchant of Record. Receives your email and handles your payment details directly; we never see your card number.
  • Our email delivery provider: sends the emailed digest and earnings alerts, only if you've opted into either. Receives your email address and the content of that specific message.

We do not sell your data to anyone, for any reason.

4. Why we're allowed to process this

We process your account and portfolio data because it's necessary to provide the Service you've signed up for (contractual necessity), not because we've asked for advertising-style consent, since we don't use your data for that.

5. How long we keep it

We keep your data for as long as your account exists. If you delete your account, your holdings, watchlist, digest history, and usage data are permanently deleted immediately (see Section 7).

6. Security

Credential storage and sign-in security are handled by our authentication provider, not by Drift directly. Access to the Service requires a signed session token issued by that provider. No system is perfectly secure, but we take reasonable measures to protect your data.

7. Your rights

Depending on where you live (including under the GDPR and CCPA), you have the right to:

  • Access the personal data we hold about you, and export a portable copy of it (your profile, portfolios, holdings, watchlist, and digest history) as a JSON file, any time, from your account page (Your data → Download my data). No need to email us and wait; this is instant and self-service.
  • Delete your account and all associated data. Do this any time from your account page (Danger zone → Delete account). This is immediate and permanent.
  • Correct inaccurate data. Most account/portfolio data can be edited directly in the app.
  • Object to or restrict certain processing.

To exercise a right this page doesn't already give you a direct tool for, emailtech@agenta-ai.com.

8. Children

Drift isn't directed at anyone under 18, and we don't knowingly collect data from them.

9. Changes

We'll update the date above whenever this policy changes, and post the updated version here.

10. Contact

Questions about this policy or your data: tech@agenta-ai.com.