Privacy Policy

Last updated: August 2026

This policy explains what data MarketHeist ("we", "us") collects and how we handle it across the MarketHeist website, its API, and its MCP (Model Context Protocol) connector.

We built MarketHeist to require as little personal data as possible. Most of the product works with no account and no personal information at all.

What we collect

Using the tools anonymously. You can run backtests, browse indicators, and use the MCP connector without an account. In this mode we do not collect personal information. We do not ask for your name, and we do not receive your identity from AI assistants that connect to our MCP server.

Optional account (website only). If you choose to create an account on the website, we store your email address so we can send you a passwordless sign-in link and associate your saved presets and shared strategies with you. We do not use passwords.

Content you save. If you save a preset or create a shareable strategy link, we store the configuration and results you chose to save so we can show them back to you (or to anyone you share a link with).

Automatic technical data. Like most internet services, our infrastructure records standard request information — such as IP address, timestamp, and request path — to operate the service, enforce rate limits, and protect against abuse.

What the MCP connector and API collect

The MCP connector (https://api.marketheist.io/api/mcp) and the public API are read-only and require no authentication. When you ask an AI assistant to run a backtest, it sends us only the request parameters (such as a ticker symbol and indicator settings). We do not receive your identity, your conversation, or any account information from the assistant.

Market-price data is fetched from Yahoo Finance and cached briefly and anonymously to improve performance. These caches contain only public market data, not personal information.

How we use data

We use the limited data above only to:

• Operate and improve the service
• Send passwordless sign-in links (if you create an account)
• Save and display the presets and shared strategies you create
• Maintain security, prevent abuse, and enforce rate limits

We do not sell personal data, and we do not use it for advertising.

Third parties

We rely on a small number of service providers to run MarketHeist:

• Cloudflare — hosting, content delivery, and security.
• Yahoo Finance — source of historical market price data.
• Resend — delivery of transactional sign-in emails (only if you create an account).

These providers process data solely to provide their services to us.

Data retention

• Anonymous technical logs are retained only as long as needed for security and operations, then discarded.
• Account email and saved content are retained while your account is active. You can ask us to delete them at any time (see Contact).
• Market-data caches expire automatically after a short period.

Your choices

• Use the tools without an account to share no personal data.
• If you have an account, contact us to access or delete your email and saved content.
• Market-data requests through the MCP connector and API carry no personal identifiers.

Children

MarketHeist is not directed to children under 13 and we do not knowingly collect their data.

Changes

We may update this policy as the product evolves. Material changes will be reflected by the "Last updated" date above.

Not investment advice

MarketHeist provides research and educational tools only. Nothing it produces is investment, financial, or trading advice.

Contact

Questions or data requests: support@marketheist.io