Privacy Policy

Last updated 26 October 2026

This page says what MercerFargo collects, why, who else handles it, and how to have it deleted. It covers the app at mercerfargo.trade and this site, get.mercerfargo.trade. The short version: quotes, charts and watchlists work with no account, and then your data stays in your browser. If you sign in, we keep your account and the data you sync. We don't sell personal data and we don't show ads.

If you use it without an account

• Your watchlists, portfolios, notes, chats, settings and any AI keys you add are saved in your browser on your device. They are not sent to us.
• To show prices, charts, filings and news, your browser asks public sources such as TradingView, stockanalysis.com, CoinGecko, Frankfurter (European Central Bank rates), SEC EDGAR and Google News. Some of these requests pass through our server because those sources don't accept requests from a browser. We don't keep them beyond our host's short-lived logs.
• If you add your own AI key, your messages go from your browser to the provider you chose (for example OpenRouter, OpenAI, Anthropic, xAI, Google Gemini, DeepSeek, Groq or OpenCode). OpenCode requests pass through our relay because OpenCode doesn't accept browser requests; we don't store them. The provider's own privacy policy covers what you send it.
• When Marvell searches the web or reads a page for you, the search words and the page address go through our server to the search engine (Bing, with DuckDuckGo as a backup) or to the site being read.

If you sign in

• Your account. Your email address. With Google sign-in we also get your name, profile picture and Google account ID. With email sign-in we email you a 6-digit code. We keep a scrambled (hashed) copy of the code for 10 minutes, plus a short record of when codes were sent, to stop abuse.
• Your profile. The name, age, line of work and year you started investing, if you fill them in.
• What you sync. Your portfolios, watchlists, chats, research, skills, Marvell's memory, alerts, call book and settings, so they follow you to your other devices. If you add AI keys, they sync too. They are encrypted, so our storage never holds them in readable form.
• Abuse limits. The IP address that asked for a sign-in code, kept for one hour.

Plans and payments

• Stripe handles paid plans. You type your card on Stripe's page, and we never see or store your card number. Stripe tells us your customer and subscription IDs, your plan, and when your paid period ends.
• When Marvell runs on our keys, your messages go to the AI providers we use to get the answer: currently OpenCode Go (DeepSeek), and APIX for Claude Sonnet and Opus. We count how many runs you use and what they cost. Our servers don't keep the text of your chats, apart from the chat history you sync.

Emails

If you turn on Marvell emails, we keep your email address, first name, your on/off choice and any reminders you set, and we send the emails through Resend. Every email has a one-click unsubscribe link. Sign-in codes are sent the same way.

Analytics

We use Cloudflare Web Analytics to count visits: which pages are opened, where visitors come from, what kind of device they use, and how fast pages load. It sets no cookies and doesn't follow you to other sites.

Cookies and browser storage

We don't use advertising or tracking cookies. The app saves your data and your sign-in in your browser's own storage. Google's sign-in button comes from Google and may set Google's own cookies when you use it.

Broker connection

The broker bridge runs on your own computer and talks to your broker directly. Your broker logins and orders don't pass through our servers.

Who else handles your data

• Cloudflare: hosting, storage and analytics.
• Google: sign-in.
• Stripe: payments.
• Resend: email.
• AI providers: the ones we use for plans (above), or the one you pick with your own key.
• Bing and DuckDuckGo: web search for Marvell.

These companies may handle data in the United States and other countries.

How long we keep it

• Your account and synced data: until you delete them. In the app, Settings → Cloud sync → Delete my cloud data removes your synced data straight away. To delete your whole account, including plan and email records, email us.
• Sign-in codes: 10 minutes. Abuse-limit records: up to one hour.
• Payment records: as long as tax and accounting law requires.

Your rights

You can ask us to show you, correct, export or delete your data, or to stop using it. Depending on where you live (for example the EU, the UK, California or Singapore), the law gives you these rights. We give them to everyone. Email support@mercerfargo.trade and we'll reply within 30 days. We don't sell or share your personal data for advertising. If you're in the EU or UK, you can also complain to your data protection authority.

Security

Everything travels over HTTPS. AI keys are encrypted at rest, and sign-ins expire after 30 days. No system is perfectly safe. If you find a problem, please tell security@mercerfargo.trade.

Children

MercerFargo is not meant for anyone under 18.

Changes

When this policy changes, the date at the top changes too. For big changes, we'll tell signed-in users in the app or by email.

Contact

Questions or requests: support@mercerfargo.trade. See also our Terms of Service.