Privacy Policy

Last updated: March 9, 2026

1. Introduction

SKE & Co LLC ("Company," "we," "our," or "us"), a company registered in Mongolia, operates the Embient AI platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, web application, command-line interface, and related services (collectively, the "Services"). By accessing or using the Services, you consent to the data practices described in this policy. If you do not agree with these practices, please do not use the Services.

2. Information We Collect

We collect the following categories of information: a) Account Information: When you create an account, we collect your name, email address, and password. If you sign in through a third-party provider (e.g., Google), we receive your name and email from that provider. b) Profile Information: Display name, avatar image, and preferences you choose to provide. c) Usage Data: Information about how you interact with the Services, including pages visited, features used, queries submitted to the AI assistant, chat conversation history, chart drawings, watchlists, portfolio configurations, and trading insight preferences. d) Device and Technical Data: IP address, browser type and version, operating system, device type, screen resolution, timezone, and language settings. e) Payment Information: When you subscribe to a paid plan, payment is processed by our third-party payment provider, Bonum. We store a masked version of your card number (e.g., **** 4778), card expiry date, and bank name for display purposes. We do NOT store your full card number or CVV. Your card token is encrypted using AES-256 encryption. f) User-Uploaded Content: Images (such as chart screenshots), files, and any other content you upload to the Services. g) Notification Data: If you enable push notifications, we collect your device token through Firebase Cloud Messaging. Your notification preferences (push and email) are stored in your profile.

3. How We Use Your Information

We use the information we collect for the following purposes: a) Service Delivery: To provide, operate, and maintain the Services, including generating AI-powered market analysis and trading insights based on your queries and uploaded content. b) Personalization: To customize your experience, including remembering your preferences, watchlists, and chart configurations. c) AI Processing: Your queries, uploaded images, and conversation history are sent to third-party AI model providers (currently Google) to generate analysis and responses. This data is processed according to Google's data usage policies. d) Communication: To send you service-related notifications, including subscription confirmations, billing updates, security alerts, and trading insight notifications (when enabled). e) Improvement: To analyze usage patterns and improve the Services, develop new features, and optimize performance. f) Security: To detect, prevent, and address fraud, abuse, security issues, and technical problems. g) Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Third-Party Services and Data Sharing

We share your information with the following categories of third-party services, solely for the purposes described: a) AI Model Providers: Your queries, conversation history, and uploaded images are sent to Google for processing. Google processes this data according to their own privacy and data usage policies. We encourage you to review Google's privacy policy. b) Payment Processor: Bonum processes all payment transactions. When you subscribe, Bonum receives your card information directly. We only receive a masked card number, expiry, and bank name. Bonum's handling of your payment data is governed by their own privacy policy. c) Infrastructure Providers: We use Supabase for authentication, database hosting, and file storage. Your account data, conversation history, and uploaded files are stored on Supabase's infrastructure. d) Push Notifications: We use Firebase Cloud Messaging (Google) to deliver push notifications to your devices. Firebase receives your device token and notification content. e) Market Data Providers: We fetch market data from TwelveData to display charts, prices, and indicators. TwelveData may log API requests that include requested ticker symbols. TwelveData's handling of this data is governed by their own terms of service and privacy policy. We do NOT sell your personal information to third parties. We do not share your data for advertising purposes.

5. Cookies and Similar Technologies

We use cookies and similar technologies for the following purposes: a) Authentication: Session cookies to keep you signed in and manage your authentication state. b) Preferences: To remember your settings, such as theme preference (dark/light mode), language, and layout configurations. c) Security: To help protect your account from unauthorized access. We do not use third-party advertising or analytics cookies. You can configure your browser to refuse cookies, but this may limit your ability to use certain features of the Services.

6. Data Security

We implement technical and organizational security measures to protect your data, including: a) Encryption in transit (HTTPS/TLS) for all data transmitted between your device and our servers. b) Encryption at rest for sensitive data, including payment card tokens (AES-256 encryption). c) JWT-based authentication with secure token management. d) Role-based access controls and row-level security policies on our database. e) HMAC-SHA256 webhook verification for payment provider communications. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your data as follows: a) Account Data: Retained for as long as your account is active. Upon account deletion, your personal data is permanently removed, subject to any legal retention requirements. b) Conversation History: AI chat history is retained for as long as your account is active and is deleted when you delete a conversation thread or your account. c) Payment Records: Transaction records are retained for the period required by applicable tax and accounting laws. d) Usage Logs: Server logs and usage data are retained for up to 90 days for security and debugging purposes. e) Token Usage Data: Token consumption records are retained for billing and quota enforcement purposes.

8. International Data Transfers

SKE & Co LLC is based in Mongolia. Your data may be transferred to, stored, and processed in countries other than your own, including countries where our third-party service providers operate (such as the United States for Google services). By using the Services, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your country of residence.

9. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data: a) Access: The right to request a copy of the personal data we hold about you. b) Rectification: The right to request correction of inaccurate or incomplete data. c) Deletion: The right to request deletion of your personal data. You can delete your account at any time through the account settings. d) Data Portability: The right to receive your data in a structured, machine-readable format. e) Objection: The right to object to certain processing of your data. f) Withdrawal of Consent: Where processing is based on consent, you may withdraw your consent at any time. To exercise any of these rights, please contact us at tsatsralt@swifttech.cloud. We will respond to your request within 30 days.

10. Age Requirement

The Services are intended for users who are at least 18 years old. We do not knowingly collect personal information from individuals under the age of 18. If we learn that we have collected data from a person under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal data, please contact us at tsatsralt@swifttech.cloud.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on the Services and updating the "Last updated" date. Your continued use of the Services after any changes indicates your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: SKE & Co LLC Email: tsatsralt@swifttech.cloud