Collect less. Say exactly what happens.

Anonymous product events

The site can record a small event name and timestamp, such as a diagnostic-prompt copy or the completion of a consented report. EquityLayer does not intentionally attach an email address, holdings, portfolio, IP address, user agent, or advertising identifier to these events.

These counts are read as totals per stage. Because no session, visitor, or device identifier is stored, EquityLayer cannot link one event to another or follow a person between them.

The paste page at /diagnostic runs entirely in your browser until you take an explicit network action. A diagnostic result you paste there is validated and rendered locally. It is not sent to EquityLayer unless you explicitly choose cloud sync or separately tick the de-identified sharing box, which is unchecked by default. A profile you download is written to your own device. Choosing “Save on this device” writes the Portable Research Profile to that browser's local storage; it stays there until you delete it or clear browser data. The page can record the same kind of bare event name described above — that a gap map was rendered, or that a profile was downloaded — with no copy of what you pasted.

Shared only after explicit consent

If you approve report sharing, the diagnostic may send profile categories, a Ready/Partial/Missing gap map, and capability names matched by EquityLayer's deterministic rules. The server maps profile fields to fixed vocabularies and rejects free text. Do not send holdings, identity, private files, credentials, or conversation history.

This aggregate signal guides curator sweeps and future recommendation priorities. It is not used to personalize trades or create a public investor profile.

Identifiable, explicit, and separate

“Save & sync” first saves the profile on your device. If cloud sync is configured, it then checks for an authenticated profile. You can sign in with a one-time email code or Google. The diagnostic, public MCP, and local export remain available without an account.

A cloud Portable Research Profile is identifiable because it is tied to your account. It contains only the closed-vocabulary profile categories, nine Ready/Partial/Missing states, deterministic capability matches, dates, and run/version metadata. It must not contain holdings, free text, credentials, files, or conversation history. Each cloud version has a 365-day access expiry: expired versions are excluded from profile reads and are physically purged the next time profile storage is accessed. You can export the current profile as JSON and delete the cloud copy from the diagnostic page; deletion removes all saved versions immediately.

EquityLayer stores the verified email address used for account access. It does not store the raw Google account identifier or Google access and refresh tokens. A deployment-scoped one-way owner key links account data. Signing in does not subscribe you to marketing email. While you are signed in, EquityLayer records at most one activity date per day against that one-way owner key. This supports aggregate return-use measurement without storing page history, research text, IP addresses, or device identifiers. Cloud profiles are not joined to optional de-identified diagnostic reports or basic events. The account page can delete the member record, cloud research, saved profile, and research-agent records.

Optional research backups

Workspace settings provide a separate, manual research backup. It contains the theme question, review trigger, selected companies, evidence version, and decision journal that you choose to upload. These fields can contain private text. Reading the cloud copy does not upload local research. The backup belongs to your signed-in account and is not available through the public MCP tools.

The service keeps one current research backup until you replace or delete it. Deletion removes the research content from the active application database. A revision number and account key remain to reject stale writes. Provider backups can retain older database copies under the hosting provider’s retention policy. No research text is used as a log fallback. Export a local JSON copy from Tracking & updates. Delete the cloud copy from Workspace settings.

工作區設定提供手動研究備份，包含你選擇上傳的問題、重查條件、公司、證據版本與判斷紀錄。 查看雲端副本不會上傳本機資料，公開 MCP 也無法讀取。備份保留到你取代或刪除為止。 刪除會移除應用資料庫中的研究內容；帳戶識別與版本號保留，用來阻擋舊版本寫入。 主機供應商的資料庫備份可能依其保存政策保留舊副本。

No silent email capture

Account email is used for authentication and account notices. It is separate from optional marketing email. EquityLayer does not add an account email to a newsletter without separate consent.

Waitlist signup (on /waitlist and the account page) stores only the email address you enter, the page it came from, the signup time, and when you confirmed it. We send one email with a confirmation link; an address that isn't confirmed within 7 days is deleted. Every list email has an unsubscribe link, and unsubscribing deletes the address. The links carry a signed number, not your address. You can also ask for deletion by emailing dev@equitylayer.io from that address. The form stays closed until storage, the email sender and these controls are all configured, and valid email addresses are not written to deployment logs as a fallback. List email is sent through Resend.

候補名單（/waitlist 與帳戶頁）只保存你輸入的 Email、登記來源頁面、登記時間與確認時間。登記後我們寄一封確認信， 7 天內沒確認的地址會被刪除。每封名單信都有退訂連結，退訂就是刪除地址；連結只帶一個簽章過的編號，不含你的 Email。 也可以用該信箱寄信到 dev@equitylayer.io 要求刪除。名單信由 Resend 代為寄送。 儲存、寄信與這些控制都設定好之前，表單不會開放，Email 也不會寫入部署日誌作為備援。

During beta, de-identified diagnostic reports and basic events may be written to restricted deployment logs when a database is not attached. This page will be updated before any broader data collection begins.

Agent identity without private research text

After sign-in, you can create a one-time activation code for an agent. The code expires after 15 minutes. The agent receives its own ID and private token. EquityLayer stores the agent client, creation date, last activity date, completed run count, action type, theme identifier, result state, and research version. It does not store holdings, account data, source content, or private research text in the agent activity record. Individual activity rows expire after 365 days.

Keep the agent token in the agent's private local configuration. You can revoke the agent from your account. Revocation blocks later activity reports from that token.

Research infrastructure, not a brokerage

EquityLayer does not connect a wallet, place trades, custody assets, or provide personalized investment advice. The product is independent and is not affiliated with Robinhood, Solana, Circle, or listed capability providers unless explicitly stated otherwise.