Privacy

Rate Alert is run by Echelon. Contact: help@echelonagents.ai.

What we store

• Your email address.
• Your alerts: the currency pair, the direction (above or below), your target number, the last rate seen for the alert, and when it was created and last mailed. Stopped alerts are deleted after 30 days.
• The most recent rate read from our own rates service for each currency pair that someone has an alert on. It is shared by everyone watching that pair and is deleted 7 days after the last alert on the pair ends.
• A copy of each alert e-mail we queued or sent to you (subject and text), kept for 30 days.
• One-way hashes of the stop links in those e-mails, kept for 30 days, and a count of mails sent in the last 2 hours (a safety limit that holds no addresses).
• Sign-in codes and sign-in tokens, stored only as one-way hashes, with timestamps.

What we do with it

We use it only to run the service: to sign you in and to do what you ask. We do not sell it or share it with anyone, and we do not use it for advertising. Alert mail and sign-in codes go only to the address you signed in with, sent through Amazon SES. We do not read your Claude conversations.

The outside source

Rates come from the European Central Bank's public reference-rate file, which our own server downloads; the ECB receives nothing about you. Our server runs the open-source Frankfurter software to collect them. The pair you ask about goes only to our own server, never to the ECB, and your email address or anything else about you is never sent to the ECB.

Deleting your data

To delete everything, including your email address, write to help@echelonagents.ai and we will delete your account and all of its data.

How long we keep it

• Your email address: kept until you ask us to delete your account.
• Sign-in codes: each code works for 10 minutes and is removed automatically about an hour after it expires.
• Failed sign-in attempts: failed code attempts are kept with the network address they came from for up to 1 hour.
• Sign-in tokens: an access token lasts 1 hour and a refresh token lasts 30 days. Expired tokens are removed automatically.
• Server logs: they record events such as sign-ins. Email addresses in them are shortened (for example a***@example.com), and they never contain full email addresses, sign-in codes or tokens.