Privacy Policy

Last updated: September 10, 2026

This Privacy Policy describes how Advanced Vetting Algorithms Ltd. ("the Company," "We," "Us," or "Our"), operating as Market Flux, collects, uses, and discloses information when You use our website, mobile applications, and MCP Connector (collectively, the "Service"). It also describes Your privacy rights and how applicable law protects You.

By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

Words with an initial capital letter have meanings defined under the conditions below. These definitions apply whether the terms appear in singular or plural form.

Definitions

Account means a unique account created for You to access the Service or parts of the Service.

Application or Mobile Application means the Market Flux software program made available by the Company on iOS and any other mobile platform.

MCP Connector means the Market Flux Model Context Protocol server, which allows compatible third-party AI assistants and applications (such as Claude or other MCP-compatible clients) to query Market Flux's financial data and news tools on behalf of a connected user or developer account.

Business, for the purpose of the CCPA (California Consumer Privacy Act), refers to the Company as the legal entity that collects Consumers' personal information and determines the purposes and means of processing that information, and that does business in the State of California.

Company ("the Company," "We," "Us," or "Our") refers to Advanced Vetting Algorithms Ltd., operating as Market Flux, with a registered address at 30 Rue Mérineau, Kirkland, QC H9J 3V8, Canada.

For the purpose of the GDPR, the Company is the Data Controller.

Consumer, for the purpose of the CCPA, means a natural person who is a California resident.

Cookies are small files placed on Your computer, mobile device, or any other device by a website, containing details of Your browsing history, among other uses.

Country refers to: Quebec, Canada.

Data Controller, for the purposes of the GDPR, refers to the Company as the legal person which alone or jointly with others determines the purposes and means of processing Personal Data.

Device means any device that can access the Service, such as a computer, a smartphone, or a tablet.

Personal Data is any information that relates to an identified or identifiable individual.

Service refers to the Market Flux website (accessible at marketflux.io), the Market Flux mobile Application, and the Market Flux MCP Connector.

Service Provider means any natural or legal person who processes data on behalf of the Company. For the purpose of the GDPR, Service Providers are considered Data Processors.

Usage Data refers to data collected automatically, either generated by use of the Service or from the Service infrastructure itself.

You means the individual accessing or using the Service, or the company or legal entity on whose behalf such individual is accessing or using the Service.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using the Service, We may ask You to provide certain personally identifiable information, including but not limited to:

Email address

First and last name

Occupation

Payment-related information (processed by Stripe or Apple — see "Payments" below)

An Apple or Google account identifier, if You sign in with Apple or Google (see "Sign In with Apple or Google" below)

You may create or access Your Account using Sign in with Apple or Sign in with Google instead of a password, on the website or in the mobile Application. If You do, the provider shares with Us a unique account identifier and Your email address. We use this information to create and identify Your Account and to sign You in, and the email address becomes Your Account email, used as described in this Privacy Policy. We do not receive Your Apple or Google password.

When You use Sign in with Apple, Apple may also share Your first and last name if You choose to provide it. You may also choose Apple's "Hide My Email" option, in which case We receive a private relay address from Apple that forwards messages to Your personal email address, and We do not receive the underlying address.

Apple's and Google's own handling of Your information is governed by their privacy policies, available at apple.com/legal/privacy and policies.google.com/privacy.

Usage Data — Website

Usage Data is collected automatically when You use the website. This may include Your device's IP address, browser type and version, the pages You visit, the time and date of Your visit, time spent on pages, and other diagnostic data.

Usage Data — Mobile Application

When You use the Market Flux mobile Application, We may automatically collect:

Device type, model, and operating system version

A unique device identifier

IP address

App usage and interaction data (e.g., features used, articles viewed, session length)

Crash logs and performance diagnostics

Push notification tokens, if You enable push notifications

The Market Flux mobile Application does not collect Your precise location, and does not access Your contacts, camera, or microphone.

When You tap a "link out" button on a headline or article card within the Application, You will be redirected to Your device's default browser (e.g., Safari) to view the source content externally. The Service does not embed an in-app browser for this purpose, and We do not collect data from the external site You are redirected to.

Data Collected — MCP Connector

The Market Flux MCP Connector allows a connecting AI assistant or application to query Market Flux's financial data and news tools on behalf of an authenticated account. Access to the MCP Connector is authenticated using an API key.

The Company does not log or retain the content of the requests made through the MCP Connector (for example, the specific ticker symbols, search terms, or date ranges submitted in a query). Our infrastructure provider may generate standard, short-term technical logs (such as IP address and timestamps) as part of routine server operation; these are not used to build a profile of Your activity and are not reviewed except as needed to maintain the security or stability of the Service.

The Company does not control, and is not responsible for, the privacy practices of the third-party AI assistant or application You use to connect to the MCP Connector (for example, Anthropic's Claude or another MCP-compatible client). We encourage You to review that provider's privacy policy separately.

Tracking Technologies and Cookies (Website)

We use Cookies and similar tracking technologies on the website to track activity and store certain information, including:

Necessary/Essential Cookies — required to provide the Service and authenticate users.

Functionality Cookies — remember Your preferences, such as login details.

Tracking and Performance Cookies — administered by third parties, used to understand how users interact with the website.

Targeting and Advertising Cookies — administered by third parties; only used if and when the Company enables advertising on the Service (see "Advertising" below).

The mobile Application does not use browser Cookies, but may use comparable device-level identifiers for analytics purposes as described above.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

To provide and maintain the Service, including monitoring usage.

To manage Your Account and Your access to Service features.

For the performance of a contract, including processing the subscription or purchase You have made.

To contact You regarding updates, security notices, or service-related communications.

To send You news, product updates, or promotional information, where You have not opted out.

To respond to and manage Your support requests.

For internal analytics, to understand usage trends and improve the Service.

Payments

Paid subscribers must provide payment information to complete a purchase. How that information is processed depends on where You subscribe.

On the Market Flux website, and in the mobile Application on platforms other than iOS, payment information is collected and processed directly by Stripe, our payment processor, on a Stripe-hosted checkout page. For more information on Stripe's privacy practices, see Stripe's Privacy Policy at stripe.com/privacy.

In the mobile Application on iOS, subscriptions are purchased through Apple's In-App Purchase system, and Apple collects and processes Your payment under its own terms and privacy policy, available at apple.com/legal/privacy. Apple does not share Your payment card details or billing address with Us. Apple provides Us with the transaction information needed to activate and maintain Your subscription, such as transaction identifiers, the plan and billing period purchased, purchase, renewal, and expiration dates, whether the subscription is set to renew, and its status (for example, active, expired, or refunded).

In either case, the Company does not store Your full payment card details.

Advertising

The Company does not currently display third-party advertising within the mobile Application. If the Company introduces advertising in the future — for example, to support free-tier access — this Privacy Policy will be updated in advance to disclose the relevant ad networks and Your choices regarding interest-based advertising, consistent with applicable law.

How We Share Your Personal Data

We may share Your personal information in the following situations:

With Service Providers, to monitor and analyze use of the Service, process payments, send email communications, or otherwise support and maintain the Service.

For business transfers, in connection with a merger, acquisition, financing, or sale of Company assets.

With Your consent, for any other purpose You have agreed to.

We do not sell Your Personal Data for monetary consideration.

Retention of Your Personal Data

The Company retains Your Personal Data only as long as necessary for the purposes described in this Privacy Policy, including to comply with legal obligations, resolve disputes, and enforce agreements. Usage Data is generally retained for a shorter period unless needed for security, functionality improvements, or legal compliance.

Transfer of Your Personal Data

Your information may be processed at the Company's operating offices in Quebec, Canada, and by Service Providers located in other jurisdictions, including the United States. By using the Service, You consent to this transfer. The Company takes reasonable steps to ensure Your data is treated securely in accordance with this Privacy Policy wherever it is processed.

Detailed Information on Service Providers

Analytics

Google Analytics (GA4) — used to monitor and analyze use of the website and mobile Application. For more information, see Google's Privacy Policy at policies.google.com/privacy.

Sentry — used to detect and diagnose crashes and errors in the mobile Application. Error reports include device and app details and an internal account identifier, but not Your name or email address. For more information, see Sentry's Privacy Policy at sentry.io/privacy.

Email Marketing

Kit — used to send newsletters, product updates, and marketing communications. You may opt out at any time using the unsubscribe link in any email We send, or by contacting Us. For more information, see Kit's Privacy Policy at kit.com/privacy.

Your Rights

GDPR (European Economic Area)

If You are located in the EEA, You have the right to:

Access the Personal Data We hold about You.

Request correction of inaccurate or incomplete data.

Request erasure of Your Personal Data.

Object to processing based on legitimate interest, including for direct marketing.

Request transfer of Your data in a structured, machine-readable format.

Withdraw consent at any time.

Lodge a complaint with Your local Data Protection Authority.

Quebec / Canada (Law 25 and PIPEDA)

As a company established in Quebec, Canada, Market Flux is subject to Quebec's Act Respecting the Protection of Personal Information in the Private Sector ("Law 25") and, where applicable, the federal Personal Information Protection and Electronic Documents Act ("PIPEDA"). You have the right to:

Be informed of the purposes for which Your Personal Data is collected.

Access and request correction of Your Personal Data.

Withdraw consent to the collection or use of Your Personal Data, subject to legal or contractual restrictions.

Request that the Company cease disseminating Your Personal Data or de-index it, where applicable under Law 25.

To exercise these rights, contact Us using the information in "Contact Us" below.

CCPA (California Residents)

California residents have the right to:

Be notified of the categories of Personal Data collected.

Request disclosure of the categories and specific pieces of Personal Data collected, and the purposes for collection.

Request deletion of Personal Data, subject to certain exceptions.

Opt out of the sale of Personal Data. (The Company does not sell Personal Data for monetary consideration.)

Not be discriminated against for exercising these rights.

Categories of Personal Information Collected (CCPA)

A: Identifiers (name, email, IP address, device ID) — Collected: Yes.

B: California Customer Records categories (e.g., financial information processed via Stripe) — Collected: Yes.

C: Protected classification characteristics — Collected: No.

D: Commercial information — Collected: No.

E: Biometric information — Collected: No.

F: Internet or network activity — Collected: Yes.

G: Geolocation data — Collected: No.

H: Sensory data — Collected: No.

I: Professional/employment information — Collected: No.

J: Education information — Collected: No.

K: Inferences drawn from other data — Collected: No.

Children's Privacy

The Service does not address anyone under the age of 16, and the Company does not knowingly collect Personal Data from anyone under 16. If You are a parent or guardian and believe Your child has provided Us with Personal Data, please contact Us so We can remove it.

Security of Your Personal Data

The security of Your Personal Data is important to Us. While We use commercially reasonable means to protect Your Personal Data, no method of transmission over the Internet or electronic storage is 100% secure, and We cannot guarantee absolute security.

Links to Other Websites

The Service, including the mobile Application's article "link out" feature, may direct You to third-party websites not operated by Us. We have no control over and assume no responsibility for the content or privacy practices of any third-party site. We encourage You to review the privacy policy of every site You visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify You of material changes by posting the updated policy on this page and updating the "Last updated" date above, and where required by law, by additional notice (such as email or an in-app notice).

If You have any questions about this Privacy Policy, You can contact Us:

Email: support@marketflux.io

Address: 30 Rue Mérineau, Kirkland, QC H9J 3V8, Canada