Last updated 5 October 2026. In short: AgentZ tools receive only what you or your assistant send them, such as a market symbol or a public wallet address. We never see your conversations and never hold private keys.
AgentZ (agent-z.app) publishes market research and trading tools for Hyperliquid, and runs an MCP server and an A2A endpoint that AI assistants and agents can call. This policy covers the website, member accounts, the MCP servers at agent-z.app/mcp and agent-z.app/api/public/mcp, and the A2A endpoint at agent-z.app/api/public/a2a.
When an assistant or agent calls an AgentZ tool, we receive only the tool name and the arguments it sends: for example a market symbol such as BTC or xyz:TSLA, a number of days, a trade size, or a public Hyperliquid wallet address. We record the tool name, the time, and the wallet address if one was passed, and we keep daily call counts per endpoint. We do not receive or store your conversation with the assistant, your prompts, your chat history, your memory or any files, and the tools never ask for them.
Wallet addresses on Hyperliquid are public, and anyone can read a wallet's trades and balances from Hyperliquid's public API. Tools such as the health check and risk check read that public data for the address you pass, at the time you ask. We do not ask for, receive or store private keys or seed phrases. Signed wallet messages, used to unlock member tools, prove control of an address and cannot move funds.
If you sign up on the website we store your email address or connected wallet address, your trading settings (risk per trade, limits, markets) and the approvals you have given, so you do not have to repeat setup. If you use automated trading, the trading permission can place orders but cannot withdraw funds; we never hold member money. Messages you send to the in-site assistant are stored so we can answer them.
We use this information to answer the request, to run the service you switched on, to count usage so we can keep the service reliable and within data-provider limits, and to measure which tools are useful. We do not sell personal information and we do not use it for advertising.
Requests for market data are sent to the data sources the answer needs: Hyperliquid, and for some answers Bybit, OKX, Binance, the US Bureau of Labor Statistics and similar public sources. Those requests carry the market symbol or public wallet address, nothing else about you. Our hosting and database provider (Lovable Cloud, built on Supabase) stores the data described here. Questions sent to the in-site assistant are processed by an AI model through the Lovable AI gateway. We share information with others only if the law requires it.
Tool-call records and daily usage counts are kept for up to 24 months and then deleted or reduced to totals. Member account data is kept while the account is open and deleted within 30 days of a deletion request, except where we must keep records by law.
You can use the AgentZ market tools without an account. You can ask us to see, correct or delete the information we hold about you, or about a wallet address you control, by writing to the address below. You can revoke a trading permission at any time from your Hyperliquid account.
Data is sent over HTTPS and stored with access restricted to the services that need it. No system is perfectly secure; if we learn of a breach that affects you we will tell you without undue delay.
Questions, requests and security reports: jafrancis021@gmail.com. We aim to reply within five working days.