Privacy policy
What ENSEMBLE collects, why, and who touches it. Effective October 31, 2026.
Policy
What we collect
Account information (name and email) when you sign up or sign in with Google; the strategy prompts, scripts, and results you create on the platform; billing records for paid usage; API keys you generate; and standard technical logs (IP address, browser, request metadata) used for security and debugging.
How we use it
To operate the service: authenticate you, build and run your models, meter and bill usage, respond to support requests, and keep the platform secure. We also measure product usage, including signups, first successful model runs, and paid subscriptions. We record tagged referral sources and the first connection and successful tool use for a connected assistant, using your account ID to avoid counting reconnects as new customers. These analytics events contain no credentials, tool arguments, or research results. We do not sell your personal information, and we do not use your models or prompts to train models or share them with other users.
Processors we rely on
ENSEMBLE runs on established infrastructure providers, each processing only what its role requires: WorkOS (sign-in and identity), Stripe (payments — we never see full card numbers), Supabase (database and file storage), Vercel and Railway (hosting), Modal (isolated model execution), and Anthropic (translating your strategy descriptions into code; prompts are processed to generate your strategy and are not used for model training under our agreement).
Cookies and analytics
Necessary cookies keep you signed in and remember your cookie preferences. For visitors detected in the United States, optional Analytics and Marketing measurement are on by default unless you have saved a different choice. In other locations, or if we cannot determine your country, optional tools wait for your acceptance. Dismissing the notice or continuing to use the site does not record consent or change these defaults. Optional Analytics enables Google Analytics, PostHog browser analytics and masked session replay, and Vercel traffic and performance analytics. Optional Marketing measurement allows Google click identifiers to be retained and matched with completed signups and your first paid subscription, using payment time, currency, and the paid tier amount. Google signup reporting requires Analytics to be enabled at signup; accepting later does not replay an earlier signup. We record whether measurement was enabled by your explicit choice or the U.S. default, and keep an eligible click identifier with your billing record, with a 90-day click attribution window. Explicit cookie choices last 180 days. Country-based defaults are checked on requests and expire within 24 hours; an expired explicit choice requires renewal. You can use Reject all or change individual choices through Cookie settings in the footer at any time. Global Privacy Control disables advertising measurement. Advertising personalization is off. Reject all disables these optional browser tools. Account, billing, security, and minimal measurement decision records remain part of operating the service; server business milestones are separate from browser tracking. Withdrawal stops future collection and matching; reports already delivered may remain. Meta and Reddit browser tags and their server-side conversion delivery remain disabled. We do not send strategy prompts, backtest contents, email addresses, or phone numbers to Google Analytics or Google Ads.
Retention and deletion
Your data is retained while your account is active. Deleting a model moves it to private Trash for 30 days and stops sharing and automatic updates. You can restore it during that period or permanently delete it sooner. After 30 days, its stored code, drafts, builds, and runs are automatically purged from the active database. Minimal support records containing account and model IDs, action, and time are kept for 30 days after each deletion, restoration, or purge; they contain no strategy content. Billing records are retained separately. Deleted data may remain in backups until those backups expire and is not available through the product. To delete your account or request erasure, email support@ensemble.markets; we retain only information needed for billing, legal obligations, and resolving disputes.
Security
Credentials are handled by dedicated identity and payment providers rather than stored by us; API keys are revocable at any time from the dashboard; model code executes in isolated sandboxes; and access to production data is limited to what operating the service requires.
Connected assistants and plugins
When you connect ENSEMBLE to Claude, ChatGPT, Codex, or another assistant through OAuth, the assistant can send requested tool arguments to ENSEMBLE and receive results available to your linked account. These can include your account ID and available profile name and email, asset filters, strategy prompts, scripts, model inputs, allocations, and backtest results. WorkOS handles account authorization. Data returned to the assistant is also subject to that service's privacy policies and controls. Disconnecting a plugin does not delete research stored in ENSEMBLE; the retention and deletion controls above continue to apply.
Changes and contact
If this policy changes materially, we will note it here with a new effective date. Questions or requests about your data: support@ensemble.markets.
Learn how Google uses information from sites that use its services.
Questions: support@ensemble.markets