Privacy Policy

What we collect

Account data: your email address, a salted hash of your password (never the password itself), your display name, your plan, and the sign-up date.

Session data: one hashed access token per signed-in client, the client name ("web", "mac"), and the creation and last-used timestamps — so you can see and revoke your own sessions.

Usage counters: per-day counts of chat requests, chat tokens, and market-data requests. These are numbers only; we do not store the content of your conversations.

Basic request metadata needed to run the service, such as the IP address used for rate limiting.

How we use it

To authenticate you, enforce your plan's daily quota, and decide which models and market-data sources you may reach.

To show you your own usage and sessions on the account page.

To protect the service from abuse (rate limiting on sign-up and sign-in).

We do not sell your data, and we do not use it for advertising or profiling.

Third parties

Model providers: when you send a chat message, the backend relays the conversation content to the selected model provider (for example DeepSeek or Moonshot/Kimi). They receive the message content only — never your email, account id, or access token.

Market data sources: Binance spot and futures quotes are relayed through our server, which passes on the symbol and query parameters only. Every other source — OKX, MEXC, and Yahoo Finance for equities — is contacted by the Mac app directly from your own machine, so those requests never reach us at all.

Provider API keys live on our server and are never exposed to the client.

Local data on your Mac

Chat history, quant results, and app preferences stay on your own Mac. Deleting the app removes them.

On the web, your access token is stored only in your browser's local storage under the key "axblade.token". Signing out removes it.

Retention and deletion

Account and session records are kept while your account exists. Revoking a session takes effect immediately — the token stops working at once. The session record itself is kept, marked revoked, so you have an audit trail.

Usage counters are aggregated per day and kept for service operation and abuse prevention.

You can delete your account yourself, at any time: use the danger zone at the bottom of the account page on chillskill.xyz. Deletion takes effect immediately and removes your account, all of its sessions, and its usage records. The Mac app offers the same control from version 0.3.0 onward. If you would rather we did it, email support@chillskill.xyz from your registered address.

Not investment advice

ChillSkill is a research tool. Model output, quotes, and quantitative results are provided for information only and are not investment advice, an offer, or a recommendation. You are solely responsible for your trading decisions.

Contact

Questions, data requests, or complaints: support@chillskill.xyz.

Wallet sign-in and on-chain transactions

If you sign in with a wallet, we store your public wallet address as your account identifier and a placeholder email; we never see your private key. Signing in is a message signature (EIP-4361) and creates no transaction.

Each AI message sent from the web workspace requires a transaction with zero value from your wallet to our treasury address. We store the transaction hash, block number and time to prevent reuse and to show your history. These facts are also public on BNB Smart Chain.

Deleting your account removes the wallet identity and the transaction records from our database; on-chain data cannot be deleted.