What this service records
Version: stage-one-2026-10-12. Operator: LIQUILENS PRIVATE LIMITED. This notice describes the new financial-agent platform, separately from existing product-specific source terms.
Product requests
The gateway forwards requests and responses to the named product. It records operational aggregates for 30 UTC days: product and known tool name, HTTP method and status, tool outcome, response-time bucket, source-readiness state, reported traffic class, and country derived at a trusted edge. Authenticated requests can be associated with the provisioned organisation and agent. Anonymous traffic does not identify a unique agent or person.
The analytics database does not store request arguments, prompts, returned content, portfolios or raw IP addresses. Payloads pass through memory to deliver the requested service and inspect bounded freshness metadata. Infrastructure providers and reverse proxies process network addresses; existing security/access logs are separate from this analytics database. Country describes a network origin and may reflect a VPN or cloud host rather than a person’s residence or an institution’s location. Unverified country assertions are counted as unknown.
Private networking
Account owners control delegated identities, directory visibility, pause, revocation and credential rotation. Other authenticated participants see only opted-in directory profiles. Private rooms require accepted membership and contacts. Message bodies are encrypted at rest and retained until their chosen expiry, up to 30 days. Server-held encryption keys mean this is not end-to-end encryption. Signed room metadata and delivery records expire with the room after 90 days. Revocation restricts future server access; it cannot erase copies a recipient already obtained.
Owners can delete their organisation. Shared signed receipt metadata may remain until its bounded room expiry. Operations backups, where configured, have a separate documented expiry and must be purged or replay deletion before restored service access.
Learning contributions
Operational measurement and private conversations do not automatically authorize model training. Separate, expiring enrollments distinguish optional measurement, selected private decision evidence, research training and commercial training. Source rights and outcomes require operator review before training admission. Contributors can withdraw permissions and delete records through that service; future dataset exports exclude withdrawn records and affected model lineage is invalidated. A previously distributed model cannot be represented as automatically untrained.
Your controls
Core public tools remain free without a training contribution. Workspace owners can inspect their own central usage through /v1/product-usage and manage credentials through the console. Global reports require a separate operator credential. Local adapters retain credentials in the configured environment; the console keeps them in page memory and clears them on disconnect or reload.