Privacy Policy

Mithril Technologies, Inc. ("Mithril," "we," "us," or "our") operates the Mithril platform ("Platform"), a private market data aggregator and matching service. This Privacy Policy describes how we collect, use, share, and protect your personal information when you access or use the Platform. By using the Platform, you consent to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect information provided through our authentication provider, Clerk. This may include your email address, full name, profile photograph, and authentication identifiers. If you sign in via a third-party provider (such as Google or GitHub), we receive the profile information that provider makes available according to your settings with them.

1.2 Usage and Browsing Data

We automatically collect information about how you interact with the Platform, including pages viewed, companies and markets browsed, search queries, time spent on pages, click patterns, referral sources, and navigation paths. This data helps us understand how the Platform is used and identify areas for improvement.

1.3 Trade and Market Preferences

When you interact with trading features, we collect data related to your activity, including indications of interest (IOIs) submitted, orders placed on prediction markets and tokenized equity order books, watchlist selections, sector preferences, and notification settings. This information is used to facilitate counterparty matching and improve your experience.

1.4 Device and Technical Data

We collect standard technical information transmitted by your browser or device, including IP address, browser type and version, operating system, device identifiers, screen resolution, language preferences, and time zone. We use this information for security, fraud prevention, and analytics purposes.

1.5 Communications

If you contact us via email or submit feedback through the Platform, we retain the content of those communications along with your contact information to respond to your inquiries and improve our services.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and operate the Platform — authenticate your identity, display your portfolio and order history, and enable access to Platform features.
• Facilitate counterparty matching — use your IOIs, order data, and preferences to match you with potential counterparties for OTC secondary transactions. We share only the minimum information necessary to facilitate an introduction.
• Improve the Platform — analyze usage patterns to enhance features, fix issues, optimize performance, and develop new products.
• Security and fraud prevention — detect and prevent unauthorized access, abuse, or fraudulent activity on the Platform.
• Compliance — comply with applicable legal obligations, respond to lawful requests from public authorities, and enforce our Terms of Service.
• Communications — send you service-related notifications, such as order confirmations, security alerts, and material changes to these policies. We do not send unsolicited marketing emails without your explicit opt-in consent.

3. Third-Party Services

The Platform relies on third-party infrastructure providers to deliver its services. These providers may process your personal information on our behalf in accordance with their own privacy policies:

• Clerk — Authentication and identity management. Clerk processes your email, name, and authentication credentials. See clerk.com/privacy.
• Supabase — Database and backend infrastructure. Your account data, orders, and platform activity are stored in Supabase-hosted PostgreSQL databases with row-level security. See supabase.com/privacy.
• Vercel — Application hosting and edge network. Vercel may process request metadata including IP addresses and request headers. See vercel.com/legal/privacy-policy.
• CoinGecko / GeckoTerminal — Market data enrichment. We query CoinGecko APIs for token pricing data. Your personal information is not shared with CoinGecko; only server-side API calls are made.
• Blockchain Networks — Transactions involving tokenized equity and prediction market settlements are recorded on public blockchain networks (e.g., Base, Ethereum). Blockchain transactions are publicly visible and permanent by design. Wallet addresses associated with your on-chain activity are not reversible or deletable.

We do not sell your personal information to any third party. We do not share your data with advertisers.

4. Cookies and Tracking Technologies

The Platform uses essential cookies and local storage for authentication session management and user preferences. We do not use third-party advertising cookies or tracking pixels. Analytics data is collected through server-side logging and first-party instrumentation only.

5. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide you with the Platform's services. Specific retention periods are as follows:

• Account data — Retained for the duration of your account and for 30 days after account deletion to allow for recovery.
• Transaction and order history — Retained for 7 years after the transaction date to comply with financial record-keeping obligations.
• Usage and analytics data — Retained in aggregated, anonymized form indefinitely. Identifiable usage logs are retained for up to 12 months.
• Audit logs — Retained for 7 years for compliance and dispute resolution purposes.
• Communications — Retained for 3 years after the last interaction.

Upon account deletion, we will remove or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes as described above.

6. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Access — Request a copy of the personal information we hold about you, including account data, order history, and usage logs.
• Correction — Request correction of inaccurate or incomplete personal information.
• Deletion — Request deletion of your personal information, subject to our retention obligations. You may delete your account at any time through the Platform settings or by contacting us.
• Data Portability — Request an export of your data in a commonly used, machine-readable format.
• Restriction — Request that we restrict the processing of your personal information in certain circumstances.
• Objection — Object to the processing of your personal information where we rely on legitimate interests as the legal basis.

To exercise any of these rights, contact us at legal@mithril.pro. We will respond to verified requests within 30 days. We may request additional information to verify your identity before processing a rights request.

7. Data Security

We implement industry-standard technical and organizational measures to protect your personal information, including encryption in transit (TLS 1.3), encryption at rest, row-level security policies in our database, secure authentication via Clerk, and regular security reviews. However, no method of transmission or storage is completely secure. We cannot guarantee the absolute security of your data and are not liable for unauthorized access resulting from factors outside our reasonable control.

8. International Data Transfers

The Platform is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. By using the Platform, you consent to the transfer of your information to jurisdictions that may have different data protection laws than your own.

9. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a user under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal information, please contact us at legal@mithril.pro.

10. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. As stated above, we do not sell personal information. To exercise your CCPA rights, contact us at legal@mithril.pro.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on the Platform. Your continued use of the Platform after any changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us at: