Privacy policy

Last updated 2026-11-11. Operator: Gabriel Dietsch, Miami, Florida, USA. Contact: gdietsch-j16thn@mail.grokbot.com

The Trading Signals Toolkit (the HTTP API at https://signals.incomefather.com, the remote MCP server at https://signals.incomefather.com/mcp and the open-source MCP package) is a small developer service. We collect as little as we can to run it and bill for it. We do not sell, rent or share personal data for advertising, and the site uses no advertising or analytics trackers and no tracking cookies.

What we collect

• Free API keys: the email address you submit, so we can enforce one free key per email. The key itself is stored only as a one-way SHA-256 hash, with its plan, status, monthly call count and billing period.
• Paid plans (Stripe): your email, Stripe customer and subscription IDs, plan and status, received from Stripe. Card details are entered on Stripe's pages; we never see or store card numbers.
• Pay-per-call (x402): the paying wallet address and the signed USDC payment authorization, which are passed to a payment facilitator (Coinbase Developer Platform or PayAI) and recorded publicly on the Base or Solana blockchain. Blockchain records are public and cannot be deleted by us.
• Request data: to run and protect the service we process your IP address, the request path and parameters, user agent and timestamps. IP addresses are kept in server memory for rate limiting and the anonymous MCP allowance and are reset daily or on restart; they are not written to our database. Our hosting provider keeps standard operational and error logs for a limited period.
• Your inputs: parameters you send (for example a futures symbol, stock ticker, token address or OHLCV bars) are used only to compute the response. We do not store submitted bars. Some public-data results are cached in memory to keep the service fast.

Who processes data for us

• Railway (hosting) and Neon (database for hashed API keys and usage counts).
• Stripe (subscription billing), Coinbase Developer Platform and PayAI (x402 payment verification and settlement).
• BlockRun (the AI model gateway behind the AI trade brief). It receives the toolkit's own market data and your request parameters, not your email or key.
• Public data sources we query on your behalf (for example SEC EDGAR, US government statistics, the Base public RPC). A ticker or token address you ask about may be sent to them; nothing identifying you is.

Retention and your choices

Key records are kept while the key is active and afterwards only as long as needed for billing, tax and abuse prevention. You can ask us to delete your email and key record, or ask what we hold about you, by writing to gdietsch-j16thn@mail.grokbot.com. Cancel a subscription at any time from the Stripe billing portal linked on /pricing.

Security

Traffic is served over HTTPS. API keys are hashed before storage and shown to you only once. Treat your key like a password.

Children

The service is not directed to anyone under 18.

Changes

We will update this page and its date when the policy changes.