Privacy Policy

Last updated: March 2026

SimpleFunctions provides a context runtime and API for prediction market agents. This policy explains what data we collect, how we use it, and your rights.

1. Information we collect

Account data

When you sign up, we collect your email address and basic profile information via Google OAuth through Supabase Auth. We do not store your Google password.

API and thesis data

When you use our API or CLI, we store the data you submit: thesis statements, injected signals, context configurations, and evaluation results. This data is tied to your API key and is necessary to provide the service.

Usage and analytics

We collect anonymized usage data through Vercel Analytics to understand how the site and API are used. This includes page views, API call frequency, and response times. We do not track individual browsing behavior across other sites.

Market data

We aggregate publicly available market data from Kalshi and Polymarket. This data is not personal information — it is public market pricing, volume, and contract metadata.

2. How we use your data

• To authenticate you and manage your API keys
• To store and evaluate your thesis against live market data
• To run continuous context scans and push alerts to your agent
• To improve the service — aggregate usage patterns, not individual content
• To communicate product updates, if you opted in

We do not sell your data. We do not share your thesis content, signals, or trading context with other users or third parties.

3. Third-party services

We use the following third-party services to operate:

Supabase       → Authentication, database
Vercel         → Hosting, edge functions, analytics
OpenRouter     → AI model inference (thesis evaluation, research)
Kalshi API     → Public market data aggregation
Polymarket API → Public market data aggregation
Langfuse       → AI observability (anonymized traces)

Each service has its own privacy policy. When we send data to AI models for thesis evaluation, we send only the minimum context required — your thesis statement and relevant market data. We do not send your email, API key, or account information to AI providers.

4. Data retention

Your account data is retained as long as your account is active. Thesis data and context history are retained for the lifetime of each thesis — you can delete a thesis and its associated data at any time via the API or CLI.

$ sf thesis delete <thesis-id>
✓ Thesis deleted
✓ All signals, context, and evaluations purged

If you delete your account, all associated data — theses, signals, API keys, and usage history — is permanently deleted within 30 days.

5. Cookies

We use essential cookies for authentication (session tokens via Supabase). We use Vercel Analytics which does not use cookies and does not track users across sites. We do not use advertising cookies or trackers.

6. Your rights

You can request a full export or deletion of your data at any time by emailing us. If you are in the EU, you have additional rights under GDPR including the right to access, rectify, and erase your personal data.

7. Security

API keys are hashed before storage. All data is transmitted over HTTPS. Database access is restricted to authenticated service roles. We do not store plaintext credentials. However, no system is perfectly secure — use the service at your own risk.

8. Changes

We may update this policy. Material changes will be communicated via email to active users. The latest version is always available at this URL.

9. Contact

Questions about this policy: privacy@simplefunctions.dev