Privacy Policy

1. Your prompts and AI conversations

cvforge is a desktop app that you run on your own computer. You bring your own AI coding agent — Claude, Codex, Gemini, Grok, Cursor, or another — and that agent does the work of turning your plain-English requests into market tools.

Because of how this works, the prompts you write and the back-and-forth conversation history with your agent are exchanged directly between you, the agent running on your machine, and whichever AI provider you have configured. That traffic does not pass through ConvexValue. We do not receive it, we do not store it, and we have no technical ability to read or reconstruct your chats. There is no setting that turns this off, because there is nothing to turn off — the data simply isn't sent to us.

What cvforge does provide is the live market data your tools query. When a tool you build asks for options chains, fundamentals, or other data, that request reaches our backend so we can return the data — so we may process the data your tools fetch and basic request metadata. But that is separate from your conversation with your agent: the instructions, prompts, and chat history you exchange with it never reach our servers.

Your agent and its AI provider have their own privacy terms covering the messages you send them. We encourage you to review the policy of whichever provider you choose.

2. Information we collect

We keep this list short on purpose. We collect:

• Account information

  When you create an account, join the waitlist, or sign in, we collect your email address and the credentials needed to authenticate you (for example, a session token stored in a secure, httpOnly cookie).

• Billing information

  When you subscribe, our payment processor (Stripe) collects your name, email, and payment details to process the transaction. We do not see or store your full card number — Stripe handles payment data directly.

• Usage and analytics data

  We use privacy-friendly analytics to understand how the site and app are used — for example, which pages are viewed and which buttons are clicked. This is largely pseudonymous and includes basic device, browser, and referral information.

• Technical and log data

  Like most websites, our hosting provider automatically records standard request data such as IP address, user agent, and timestamps to keep the service secure and reliable.

3. What we never collect

To be explicit, ConvexValue does not collect, store, or have access to:

• Your prompts or the conversation history you exchange with your AI coding agent.
• The contents of the tools, dashboards, scanners, or other work you build in cvforge — these are saved locally on your machine.
• Any code your agent writes for you.
• Your full payment card details (these go directly to our payment processor).

4. How we use information

We use the limited data we collect to:

• Create and maintain your account and keep you signed in.
• Process subscriptions, payments, and manage your billing.
• Provide the market data that your cvforge tools request.
• Operate, secure, debug, and improve the website and app.
• Understand aggregate usage so we can make the product better.
• Send you essential service messages (for example, account, billing, or security notices).
• Comply with legal obligations and enforce our terms.

We do not sell your personal data, and we do not use your information for advertising.

5. Cookies and analytics

We use a small number of cookies and similar technologies. A secure, httpOnly session cookie keeps you signed in. Our analytics provider sets identifiers to measure usage and remember where visitors first came from (for example, UTM campaign parameters).

Our analytics requests are proxied through our own domain rather than calling a third-party domain directly. We aim to keep analytics pseudonymous and to avoid collecting more than we need to understand and improve the product. You can also block non-essential cookies through your browser settings.

6. Who we share data with

We do not sell your personal data. We share limited data only with the service providers that help us run cvforge, and only as needed for them to perform their function. Each operates under its own privacy policy:

The live market data in the cvforge plans is sourced from third-party data vendors (including Financial Modeling Prep and Massive). They supply data to us; they are not given your account or personal information. We may also disclose information if required by law, to protect our rights or users, or in connection with a merger, acquisition, or sale of assets.

7. Data retention

We keep personal data only for as long as your account is active or as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. Billing records are retained as required for tax and accounting purposes. When you close your account, we delete or anonymize your personal data within a reasonable period, except where we are required to keep it.

8. Security

We use industry-standard safeguards to protect your data, including encryption in transit (HTTPS), secure session handling, and reputable infrastructure and payment providers. No method of transmission or storage is ever completely secure, so we cannot guarantee absolute security — but the most sensitive thing about your work, your prompts and conversations, is never sent to us in the first place.

9. Your rights and choices

Depending on where you live, you may have rights under laws such as the GDPR (EU/UK) or CCPA (California), including the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Opt out of non-essential analytics.

To exercise any of these rights, email us at support@convexvalue.com. We will respond within the timeframe required by applicable law. We will never charge you or deny you service for exercising your privacy rights.

10. International data transfers

ConvexValue and our service providers may process and store data in countries other than the one you live in, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) to protect your data when it is transferred across borders.

11. Children's privacy

cvforge is intended for adults and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you. Your continued use of cvforge after an update means you accept the revised policy.

13. Contact us

If you have any questions about this policy or how we handle your data, reach out and we'll help: