Privacy policy

How to reach you. Your phone number if you use Baum by text, and your Telegram chat identifier if you use Baum on Telegram. These are how a reply gets back to you, and they are how we recognise you as the same person across both.

What you say to Baum. The messages you send and the answers Baum sends back. Because Baum reports on your accounts, those answers can contain balances and positions.

Your wallets. Public wallet addresses you connect or that Baum creates for you. If you choose to import a private key so Baum can sign for a wallet, we hold that key encrypted — see How this is protected below.

Your brokerage connection. If you connect Robinhood, we hold the access credentials that connection issues, encrypted, along with the account identifiers Robinhood returns. We never receive or store your Robinhood password.

Site usage. Page views and a small number of named events, so we can tell which parts of the site work. This is ordinary web analytics and is not joined to your messages.

To answer you, to carry out the actions you ask for and confirm, to keep enough context that a follow-up question makes sense, to keep the service working and secure, and to meet our legal obligations.

Baum sends the content of your conversation to Anthropic’s API to generate a reply. We do not use your conversations to train models, and our agreement with Anthropic does not permit them to either.

We do not use your data for automated decisions with legal effects. Baum proposes; nothing is signed or placed until you confirm it.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Your phone number and your consent to be texted are used only to run the Baum messaging programme described in our terms.

You consent to texts by authorising your number at baumai.xyz/connect. Message frequency varies. Message and data rates may apply. Reply HELP for help or STOP to stop at any time.

We use other companies to run Baum. They act on our instructions and only for the purposes above: Amazon Web Services (hosting, database, encryption, logs), Anthropic (generating replies), Twilio (text messages), Telegram (chat messages), Robinhood (only if you connect it), PostHog and Amazon CloudWatch (site analytics), Resend (email notifications), and the onchain data and routing providers Baum quotes prices from.

We may also disclose information where the law requires it, or to protect the service and its users from fraud or abuse. We do not sell your personal information.

Your conversation — the last twenty turns, deleted after seven days of no contact. Baum does not retain the underlying account figures from a past turn, by design: it may remember that you asked about a position, not what the position was.

A short note about you — up to about 1,200 characters of prose covering topics and preferences, so Baum does not restart from nothing each time. Figures are stripped out of it before it is stored. Deleted after 180 days of no contact.

Wallet keys and brokerage credentials — kept until you remove them, which you can do at any time.

Analytics and logs — kept on a rolling basis for operating and debugging the service.

Private keys and brokerage credentials are encrypted with AWS KMS and are never written to disk, logged, or returned to anyone in readable form. The code that handles them hands back something that can sign, never the secret itself, and error messages about them never quote what failed.

Holding a private key is total authority over the funds in that wallet, and we would rather say so plainly than bury it: importing one is optional, Baum works without it, and Baum will not accept a private key over SMS at all.

No system is perfectly secure, and a wallet you give Baum a key for is only as safe as this arrangement. Give it what you are willing to have operated by software.

Stop texts. Reply STOP to any message, or turn notifications off at baumai.xyz/connect. Reply START to resume.

Delete your conversation. Send /reset to Baum. It clears the conversation and the note about you, on every channel.

Remove a brokerage connection. Send /disconnect. This deletes our copy of the credentials. It does not revoke the authorisation at Robinhood’s end, which you can do in your Robinhood settings.

Remove a wallet key. Send /wallet forget <address>.

Ask for a copy, or for everything to be deleted. Email m@trystable.co. Depending on where you live you may have rights to access, correct, delete, or port your data, and to object to some processing. We will not treat you differently for exercising them.