Your data
What Ultron stores, which providers receive your queries, and how to revoke access or delete your account.
What we store
Ultron stores your public wallet identity, hashed session/access credentials, account preferences, conversations, monitor settings, saved wallet labels, supplied trade records, research routines, events and request metadata. It does not request wallet private keys or seed phrases. Optional model and research API keys are encrypted and bound to your account and provider.
Optional messaging connections store platform identifiers and delivery records needed to serve previously linked accounts. API keys belong in the encrypted connection form, never chat.
What leaves Ultron
Requested contract addresses, wallet addresses and stock symbols go to the relevant issuer API, configured chain RPC or market-data provider. News queries go to Google News RSS or a labeled Bing fallback. Approved research goes to your selected Apify or X provider; wallet history reads go to your connected Alchemy project. These providers have their own terms and retention practices.
Hosted web/bot chat sends your messages, recent conversation context, preferences and relevant tool evidence to your selected model provider. A remote MCP used in another AI client follows that client's model and privacy terms. Stored provider secrets are not inserted into model context.
Retention
Request metadata, routine results and research jobs/results are retained for 30 days; inbox events for 90 days; imported FOMO observations for 24 hours. Inactive assistant conversations are removed after 90 days. Saved wallet labels and supplied accounting records persist until account deletion. Preferences and encrypted provider connections persist until reset, disconnected or the account is deleted.
Authentication challenges expire after five minutes. Sessions and OAuth grants expire after seven days; access keys after 30 days. Temporary link codes expire after ten minutes. Expired records are removed by scheduled cleanup.
Your controls
Revoke Ultron keys or delete your account in workspace settings. Disconnect model/research providers and channels in Connections. Account deletion removes associated stored records. A disconnected key cannot be used for subsequent provider steps, but a request already accepted by a provider may complete.
Public blockchain records and third-party logs cannot be deleted by Ultron. Do not enter secrets or unnecessary personal information in research prompts, imports or API arguments.