1. About this Policy
This Privacy Policy explains how Centaur handles personal data in connection with the Centaur partner data platform, comprising the REST API, the MCP server and the partner documentation at https://partners.centaur.io (the “Partner Platform”). It covers three groups of people:- Partner personnel — the individuals at a partner organisation who register for access, hold credentials, or contact us about the Partner Platform.
- Visitors to the partners website and documentation.
- Traders — third-party authors of publicly available content that Centaur collects, classifies and ranks, and whose personal data may be made available to partners through the Partner Platform. Traders are not Centaur users and have not registered with us. Section 6 is addressed to Traders and explains how to object or request removal.
2. Who We Are
Centaur is the trading name of CHRONOS LABS PTE. LTD., a company incorporated in the Republic of Singapore, whose registered office is at 1 Irving Place #08-11, The Commerze@Irving, Singapore 369546. Centaur is the data controller for the processing described in this Policy, except where this Policy states that a partner acts as an independent controller. You can contact us about this Policy, or about your personal data, at support@centaur.io.3. Partner Account and Credential Data
When a partner organisation registers for or uses the Partner Platform, we process personal data about the individuals involved, including:- Name and business email address
- Organisation name and role
- Account status and email verification status
- API key and OAuth client records, including which scopes are enabled, and which applications are connected
- Authentication and request logs, including IP address, timestamps, endpoints called, request volumes and error responses
4. Support and Service Communications
If you contact us, we process your name, email address, the content of your message, and any technical detail you provide or that we log, in order to respond and to diagnose issues. We also send operational messages about the Partner Platform, such as changes to endpoints, deprecations, incidents, security notices, and changes to these terms. These are not marketing messages and you cannot opt out of them while you hold access. Legal basis: performance of a contract under Article 6(1)(b) GDPR, and our legitimate interests in operating and supporting the Partner Platform under Article 6(1)(f) GDPR. Where we send optional marketing about new Centaur products or features, we do so only with your consent, which you may withdraw at any time by contacting support@centaur.io. Legal basis: consent under Article 6(1)(a) GDPR.5. Partners Website, Analytics and Cookies
We use analytics on the partners website and documentation, currently PostHog, to understand how the documentation is used and to improve it. This may involve processing IP address, browser and device information, approximate location, and pages and paths visited. We and our analytics provider use cookies and similar technologies to operate the site, maintain your session and collect the above information. Strictly necessary cookies are required for the site to function. Analytics cookies are optional and, where required by applicable law, are set only with your consent, which you may withdraw at any time. Legal basis: our legitimate interests in maintaining and improving the Partner Platform under Article 6(1)(f) GDPR, for strictly necessary cookies and aggregate analysis; and consent under Article 6(1)(a) GDPR for optional analytics cookies.6. Trader Data Made Available Through the Partner Platform
This Section is the most important part of this Policy for anyone who is a Trader, and for any partner receiving Trader data.What we collect and make available
Centaur collects personal data relating to third-party authors of publicly available content, from public sources, currently Telegram channels and groups, and public accounts on X, which we access exclusively through the official X API. Depending on the access scopes enabled for a given partner, the Partner Platform may make available:- Account identifiers, including handle or username and platform account identifier
- Display name, profile image and profile URL
- Publicly available audience metrics, such as follower or subscriber count
- Source-message text, timestamps, attachments and links to the original post
- Data derived by Centaur from that content, including classified trade events, positions, performance statistics, activity summaries, narrative summaries and comparative rankings
Why we process it
We process this data to operate Centaur’s products and the Partner Platform: to identify and classify publicly posted trading commentary, to generate statistics and comparative rankings, to provide source transparency so that outputs can be verified, and to make this information available to Centaur users and to partner organisations under written agreement. Legal basis: legitimate interests under Article 6(1)(f) GDPR. Our legitimate interest is in operating a market-information service that aggregates publicly available commentary and in making it available to business customers. We have weighed that interest against the rights and freedoms of Traders, taking into account that the content was published publicly by its author, that we do not collect content that is private or access-restricted, that we do not use the data to contact or target Traders, and that we provide a route to object and to request removal. Because we do not obtain this data from Traders directly, we rely on Article 14(5)(b) GDPR where providing individual notice to each Trader would involve disproportionate effort. This Policy, together with the Centaur Privacy Policy, serves as that notice.The role of partners
Where a partner receives Trader personal data through the Partner Platform, that partner becomes an independent controller in respect of its own use of that data. The partner is not our processor for that purpose, and we are not the partner’s processor. Each partner is responsible for its own lawful basis, its own transparency information, its own security, and for responding to requests it receives. A partner’s processing is governed by that partner’s own privacy notice and by its agreement with Centaur. Under the Centaur Partner API Terms of Service, partners are contractually required to give effect to removal and suppression decisions we accept, to cease displaying affected material and delete it within seventy-two hours, and not to re-identify, enrich or cross-reference Trader data or use it to contact, target or make decisions about individuals.If you are a Trader
You may object to our processing, or request access, correction, restriction or removal, at any time by contacting support@centaur.io. Where you object, we will cease processing your personal data and remove you from our products unless we can demonstrate compelling legitimate grounds that override your interests. Where we accept a removal, correction or restriction request, we will notify partner organisations that have received your data and require them to give effect to it, as described above. Please note that we cannot guarantee the conduct of an independent controller, but we will enforce our contractual rights against a partner that fails to comply, including by suspending its access. Information we generate about Traders, including trade classifications, statistics and rankings, is automatically produced and consists of estimates. It is not audited and is not confirmed with any Trader. If you believe information we hold or publish about you is inaccurate, you may request its correction or removal at support@centaur.io. This processing does not produce legal effects concerning any individual, and we do not use it to make decisions about access to services, credit, insurance, employment or any similar matter.7. Sharing and Recipients
We do not sell personal data. We share personal data only as follows:- With partner organisations, in respect of Trader data, as described in Section 6 and subject to a written agreement. We do not disclose partner credentials or the personal data of one partner’s personnel to another partner.
- With service providers acting as our processors, bound by confidentiality and data protection terms.
- Where legally required, for example in response to a court order, regulatory request, or to establish, exercise or defend legal claims.
- In connection with a corporate transaction, such as a merger, reorganisation or sale of assets, subject to appropriate confidentiality protections.
8. International Transfers
Centaur and several of the third parties named above operate outside your country of residence, including in the United States. Where we transfer personal data out of the European Economic Area, the United Kingdom or Singapore, we rely on an appropriate transfer mechanism, such as Standard Contractual Clauses, or on another lawful basis for the transfer. You may request further information about the safeguards that apply by contacting support@centaur.io.9. Retention
We retain personal data only for as long as necessary for the purposes described in this Policy, or as required by law.- Partner account and credential data: for as long as the partner relationship is active, and for a reasonable period afterwards to meet legal, tax and accounting obligations and to resolve disputes.
- Authentication and request logs: for the period necessary for security monitoring, abuse detection, billing verification and incident investigation.
- Trader data: for as long as it remains relevant to the statistics and rankings we publish, and thereafter in accordance with any removal request we accept.
- Analytics data: in line with the retention settings of our analytics provider.
10. Security
We maintain technical and organisational measures appropriate to the risk, including encryption in transit, scoped and revocable credentials, access controls, rate limiting and logging. Credentials are shown once on creation and stored by us in a form from which the original value cannot be recovered. No system is completely secure, and partners are responsible for the security of credentials in their own environments as set out in the Partner API Terms of Service.11. Your Rights
Depending on where you are located, you may have the right to:- Request access to the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your data
- Request restriction of processing
- Object to processing based on our legitimate interests, including, if you are a Trader, to the processing described in Section 6
- Request portability of data you provided to us, in a structured, machine-readable format
- Withdraw your consent at any time, where we rely on consent
12. Changes to This Policy
We may update this Policy from time to time. We will revise the Last Updated date above and, where changes are material, use reasonable efforts to notify partner organisations directly. Continued use of the Partner Platform after a change takes effect constitutes acceptance of the updated Policy.13. Contact
For any question about this Policy, to exercise your rights, or to submit a Trader removal or correction request, contact support@centaur.io. Our full legal and postal details are: CHRONOS LABS PTE. LTD.1 Irving Place #08-11
The Commerze@Irving
Singapore 369546
Republic of Singapore
Related documents: the Centaur Partner API Terms of Service governs access to the Partner Platform. The Centaur Privacy Policy and Centaur Terms of Use govern consumer use of Centaur’s own products.