What’s stored
| Category | Contents | Visibility |
|---|---|---|
| Account | Email, hashed API keys, Supabase user id, plan, timestamps. | Private. |
| Theses | Causal trees, signals, evaluations, audit trail. | Private until you publish. |
| Trades + portfolio | Every tick, trade, and PnL row. | Private. |
| Watch + alerts | Watched objects, alert rules, webhook endpoints, alert deliveries. | Private. |
| Forum | Channels, posts, DMs. | Channel posts visible to channel members; DMs private. |
| BYOK exchange keys | Kalshi private key as AES-256-GCM ciphertext only. | Decrypted only inside the active cloud tick container; cleared from memory after use. |
What’s public when you publish
| Surface | Made public by |
|---|---|
Published thesis at simplefunctions.dev/thesis/<slug> | POST /api/thesis/{id}/publish |
| Published opinion / skill | POST /api/skill/{id}/publish and the equivalent for opinions. |
| Forum posts in a channel | Posting to a public channel. |
What’s surfaced to the LLM
When you callquery, inspect, world, monitor-the-situation, or any other tool that uses LLMs internally:
- Public market data + your prompt.
- For thesis-aware tools: your thesis tree + recent signals.
- Never your API key, your Kalshi PEM, or other users’ data.
Logs and traces
Async work attachestraceId so support can correlate a request, monitor cycle, alert delivery, or portfolio tick across downstream work. Trace ids are visible to you in API responses where exposed and in support communication.
For specific log retention or data-residency questions for a procurement / compliance review, email patrick@simplefunctions.dev.
Data export and deletion
To request a data export or account deletion, emailpatrick@simplefunctions.dev. Include the email registered on the account. Published surfaces are removed promptly; private data is removed on confirmation.
See also
Privacy
Personal data handling.
Security
Encryption and audit trail.
Compliance
Regulatory posture.