MetalMiner Privacy Policy

Effective date: July 8, 2026 · Version: 2026-07-08

This Privacy Policy explains how Alpha Commodities Inc. d/b/a MetalMiner, a Delaware corporation with offices at PO Box 3009, Gary, IN 46403 ("MetalMiner," "we," "us"), collects, uses, and shares personal data when you create an account and use our products and services, including Sage, Market Signal, the MetalMiner MCP Connector, MetalMiner Insights, and the Market Signal API (collectively, the "Services").

This policy applies to the MetalMiner account and Services described here. It works together with our Terms of Service.

1. Data we collect

Category	Examples	Purpose
Account identity	Your name, email address, organization (if any), and account type	Creating and administering your account; authenticating you; authorizing access to the tools and data your plan permits
Authentication credentials	Passwords (stored only as salted hashes), OAuth 2.1 tokens, MCP API keys, and session cookies	Verifying your identity on each request. Access tokens are short-lived; API-key secrets are stored only in hashed form
Queries and tool inputs	Commodity names, date ranges, unit/currency preferences, prompts, and uploaded files you send to the Services	Executing the analytics you request and generating Output
Usage and billing metadata	Timestamps, tool or endpoint called, credits consumed, response latency, IP address, and device/browser information	Metering credit usage for billing, enforcing rate limits, securing the Services, and preventing abuse
Support communications	Messages you send to support and related correspondence	Responding to your requests and improving the Services

Commodity market data is not your personal data. The price series, support/resistance levels, forecasts, structural cost data, and report excerpts the Services return are proprietary MetalMiner market data. They are not personal data about you and are not stored under your account record.

2. How we use data

Authentication and authorization — verifying each request and confirming the requested tool, commodity, or data tier is within your plan.
Providing the Services — running your queries against MetalMiner's databases and the Market Signal API and returning results.
Billing and credit metering — recording per-tool credit consumption against your balance and processing payments.
Security, logging, and abuse prevention — detecting anomalous usage, diagnosing errors, and meeting audit obligations.
Communications — sending you service, security, billing, and (where permitted) product messages.
Improving the Services — using aggregated and de-identified usage data to operate and improve our products.

We do not use your queries or account data to train machine-learning models, and we do not build behavioral profiles for advertising. We do not sell, rent, or trade your personal data.

3. Data storage and retention

Data type	Retention
Request and usage logs (tool/endpoint, timestamp, credit usage, user ID)	30 days from collection
OAuth tokens / API keys	Tokens retained only for the active session; revoked tokens deleted; key metadata (not the secret) retained for the life of the account
Query and prompt text in logs	Not retained beyond the 30-day operational logging window
Account identity (name, email)	Retained for the life of the account; deleted within 30 days of an account-closure or deletion request, subject to legal retention requirements
Billing records	Retained as required for tax, accounting, and legal compliance

Data is stored on infrastructure operated by MetalMiner and its sub-processors (Section 4) and is not stored outside the regions those sub-processors cover.

4. Third-party sub-processors

The following may process data to provide the Services:

Sub-processor	Role	Data shared
Amazon Web Services (AWS)	Cloud hosting for the Services, databases, and search indexes	All data processed by the Services transits AWS infrastructure
Anthropic (Claude)	MCP client / Sage model provider that invokes tools on your behalf	The tool arguments and prompts you submit; no raw MetalMiner database credentials
OpenAI	Embedding generation for semantic commodity and report search	Commodity names and report text used to build/query embeddings; personal query text is not sent in real time
HubSpot	Customer relationship management and marketing email	Your name, email address, and organization name, plus your marketing email preference; no usage data, query text, or billing records

We do not sell, rent, or trade your personal data. Data is shared with sub-processors only to operate the Services, and with authorities where required by law.

5. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete personal data we hold about you, and to object to or restrict certain processing. To exercise these rights or to close your account, contact support@metalminer.com. We will respond within 30 days.

6. Security

We maintain commercially reasonable administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, use, or disclosure. No method of transmission or storage is completely secure; you are responsible for keeping your credentials confidential and for notifying us of any suspected compromise.

7. International users

MetalMiner is based in the United States, and the Services are operated from the United States. If you access the Services from outside the United States, you understand that your data will be processed in the United States and other regions covered by our sub-processors.

8. Children

The Services are not directed to children under 18, and we do not knowingly collect personal data from children.

9. Changes to this policy

We may update this policy from time to time. If we make a material change, we will provide notice (for example, by email or in-product) and update the effective date above.

10. Contact

For privacy questions or data-subject requests:

Email: support@metalminer.com

Alpha Commodities Inc. d/b/a MetalMiner PO Box 3009, Gary, IN 46403