Privacy Policy

Who this covers

This policy describes how Entropy Advisors Inc. handles information across two different things: the public dashboards published through this platform, and the Entropy Terminal, the workspace in which those dashboards are authored.

The distinction matters throughout. Reading a published dashboard requires no account and no sign-in, and we ask nothing of you. Using the Terminal requires an account, and that account is the only place personal information enters this platform at all.

Reading a published dashboard

You do not need to register, sign in, or connect a wallet to read a published dashboard, and we do not ask for your name, email address, or wallet address in order to show you one.

We collect aggregate usage measurements — which pages are viewed, and broad information such as country, browser, and device type — to understand which dashboards are used and to keep them working. These measurements are not used to build a profile of you and are not combined with any account.

The organisation that owns a dashboard may additionally configure its own analytics on the pages it publishes. Where it has, that organisation is responsible for its own analytics, and its own privacy policy governs it.

Using the Terminal

An account holds your name, your email address, a cryptographic hash of your password (never the password itself), and which workspaces you belong to and with what role. If you sign in with Google, we receive your name, email address, and profile picture from Google in order to identify your account.

Workspace content — queries you write, dashboards you compose, and the results of running them — is stored so the product can show it back to you and to the other members of your workspace. It is not used for any other purpose and is not shared between workspaces.

Data you connect remains yours. Connection credentials are stored encrypted, are used only to run the queries your workspace asks for, and are never displayed back in full once saved.

Cookies and local storage

The Terminal sets a session cookie when you sign in. It is what keeps you signed in, it is strictly necessary for the product to function, and it is not used for advertising or tracking. Signing out invalidates it.

A short-lived cookie is also set when a workspace member previews an unpublished dashboard, so that the preview shows the draft rather than the published version. It expires on its own.

Your browser's local storage is used for preferences such as layout and display settings. That data stays on your device.

Published dashboards set no cookies of ours. Where a dashboard's owner has configured their own analytics, that service may set its own.

Diagnostics and security

We keep server logs and automated error reports so that failures can be diagnosed and abuse can be detected. These may include an IP address, a browser identifier, the page or endpoint requested, and technical details of an error.

This information is used to operate and secure the service and for no other purpose. It is retained for a limited period and then discarded.

What we do not do

We do not sell your personal information, and we do not share it with third parties for their own marketing.

We do not use your information to build advertising profiles, and we do not track you across other websites.

We do not require a wallet address to read a dashboard, and we do not link on-chain addresses to individual readers.

Service providers

We rely on third parties to host the platform, to measure aggregate usage, to report errors, and to send transactional email such as an invitation or a password reset. They process information only on our instructions and only to provide those services.

Some of these providers operate in the United States. Where information is transferred out of your country, we rely on the safeguards those providers offer for such transfers.

Why we are allowed to hold it

Where the GDPR or a comparable law applies: account and workspace information is processed because it is necessary to provide a service you asked for; diagnostic and security information is processed on the basis of our legitimate interest in keeping the platform working and secure; and anything optional is processed on the basis of consent, which you may withdraw.

How long we keep it

Account and workspace information is kept for as long as the account exists. When an account is deleted, its personal information is removed, except where we are required to retain something to meet a legal obligation.

Logs and error reports are kept for a limited operating period. Aggregate usage measurements carry no identifier that would let them be traced back to a person and are retained in aggregate form.

Your rights

Depending on where you live, you may have the right to ask what personal information we hold about you, to have it corrected, to have it deleted, to receive a copy in a portable form, to object to or restrict how we use it, and to withdraw consent where we relied on it.

To exercise any of these, write to us at the address below. We will not treat you differently for asking. If you are in the EEA or the UK and you are unsatisfied with our response, you may complain to your local data protection authority.

Children

This platform is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us with information, contact us and we will delete it.

Changes

We may update this policy. When we do, we will change the date shown at the top of this page. Material changes affecting account holders will additionally be communicated through the product or by email.