Legal

Privacy Policy

What we collect, how we use it, and who we share it with. The short version: we collect only what we need to run Mixl — and by default your exchange API keys never reach us.

Last updated: July 30, 2026.

This Privacy Policy explains how D Is For Family LLC, doing business as Mixl(“Mixl,” “we,” “us,” or “our”), collects, uses, discloses, and protects information when you use the Mixl website and applications (the “Service”). It should be read together with our Terms of Service.

1. Your Exchange API Keys

By default, when you connect a prediction market such as Kalshi, your API credentials are generated and held entirely within your own browser or device, in secure, non-extractable storage. In that default mode they are never transmitted to, received by, or stored on our servers, and we have no ability to see, recover, or use them. Requests are then signed locally on your device, and those keys are outside the reach of any request, subpoena, or breach affecting our servers.

If you opt in to Cloud Key custody, you instead ask us to store one exchange credential on our servers so Autopilot can trade while your device is offline. That credential is encrypted at rest using envelope encryption backed by a managed key service, and access to decrypt it is restricted and logged. But storing it necessarily means our systems can use it to sign requests on your behalf, so — unlike the default mode — it is data we hold and could in principle be exposed if our infrastructure were compromised. We only ever use it to sign requests against your own exchange account per your settings. You can delete it at any time from Settings; deleting it removes our copy but does not revoke the key at the exchange (rotate it there to fully invalidate it). We recommend leaving keys on your device unless you need unattended trading.

2. Information We Collect

  • Account information. When you register, we process your email address, name, and login credentials. If you sign in with a social provider, we receive basic profile information (such as your name and email) from that provider.
  • Billing information. If you subscribe, a third-party payment processor collects and processes your payment details and billing information directly. We do not store your full payment-card numbers; we receive limited information such as your subscription status, plan, and the last four digits or card brand for reference.
  • Usage and app data. Data you generate in the Service — such as saved simulations, simulation usage counts, preferences, and subscription state — is stored in our database and associated with your account identifier.
  • Device and log data. Like most online services, we and our providers automatically receive technical information such as IP address, browser type, pages viewed, timestamps, and error logs, used for security, rate limiting, and to operate the Service.
  • Cookies and local storage. We use cookies and browser storage that are necessary to keep you signed in and to remember preferences (for example, your light/ dark theme). We do not sell your personal information.

3. How We Use Information

  • to provide, operate, maintain, secure, and improve the Service;
  • to authenticate you and manage your account and subscription;
  • to process payments and prevent fraud, abuse, and prohibited use;
  • to communicate with you about your account, transactions, security, and changes to the Service or our policies; and
  • to comply with law and enforce our Terms.

4. How We Share Information

We do not sell your personal information. We share information only as needed to run the Service, with service providers (“subprocessors”) who process data on our behalf, and as required by law:

  • cloud hosting and database providers, to run the Service and store your data;
  • a payment processor, to handle subscriptions and payouts;
  • identity providers you choose to sign in with (such as social sign-in);
  • an email delivery provider, for transactional and account email;
  • the regulated prediction markets you connect (such as Kalshi), when you place trades.

We use reputable third parties for these functions and require them to protect your information. A current list of subprocessors is available on request.

We may also disclose information to comply with legal obligations, enforce our agreements, protect the rights, safety, and security of Mixl and others, or in connection with a merger, acquisition, or sale of assets (subject to this Policy).

5. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, and thereafter as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize personal information we hold, except where retention is required by law or for legitimate business purposes.

6. Security

We use technical and organizational measures designed to protect information, and we minimize what we hold — by default your exchange credentials never reach us, and if you opt in to Cloud Key custody the stored credential is encrypted at rest with restricted, logged access (Section 1). No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your login credentials and device secure.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can update account information in the app, cancel your subscription at any time, and request access or deletion by contacting us. We will respond as required by applicable law and may need to verify your identity.

8. Children

The Service is not directed to, and is not intended for, anyone under 18. We do not knowingly collect personal information from children. If you believe a minor has provided us information, contact us and we will delete it.

9. International Users

We operate the Service from the United States, and information we process may be stored and handled in the United States or other countries where we or our subprocessors operate. By using the Service, you consent to that processing.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date reflects the current version, and we will indicate material changes as required by law. Your continued use of the Service after changes take effect constitutes acceptance.

11. Contact

For privacy questions or to exercise your rights, contact privacy@trymixl.com. For other legal matters, contact legal@trymixl.com.