Privacy policy
Effective 5 October 2026
Sorro is developed and operated by Enclave HK Limited, Hong Kong. This policy explains the information used by our website and mobile application. For privacy questions or requests, contact sumer@enclave.money.
Information we process
- Account and sign-in information. Authentication identifiers from Privy and your chosen Apple, Google or wallet sign-in method. Sign-in providers may process an email address and profile information under their own policies.
- Wallet and financial information. Public wallet addresses, wallet approvals and signatures, balances, positions, orders, transactions, trading preferences and the plans or alerts you create.
- App activity. Trade confirmations, comments or reports you submit, and information needed to deliver the service and resolve support requests.
- Device and diagnostics. Push notification tokens when you enable notifications, app version, crash and hang diagnostics, and technical logs needed to operate and protect the service. Hosting providers can process IP addresses and request information.
Why we use it
We use this information to authenticate you, connect your wallet, display your account, submit orders you authorize, deliver requested alerts, maintain security, troubleshoot failures, and respond to support or privacy requests. We may also preserve records where required by applicable law.
Wallets and Face ID
Privy provides embedded wallet and authentication infrastructure. Sorro's backend can hold an encrypted delegated trading key approved for your Hyperliquid account. That key is distinct from your main wallet key. Main-wallet signatures are used for initial approvals and supported fund movements. An external wallet connection does not provide Sorro with that wallet's seed phrase or private key.
Face ID authentication is performed by your device. Sorro does not receive or store your biometric templates. You can manage Face ID and notification permissions in iOS Settings.
Service providers and public networks
Relevant providers include Privy for authentication and embedded wallets; Apple and Google for sign-in; Google Cloud for application infrastructure and key protection; Apple Push Notification service for notifications; Hyperliquid and the relevant blockchain networks for account data and transaction processing; and Unit for supported deposit routes. Market data and company logos may be requested from third-party providers, including Logo.dev and issuer websites.
When AI enrichment is enabled, processing through OpenRouter extracts stated levels from third-party trade-call text. The current trade-content parsing flow does not send your wallet's private keys or your personal account balances to the AI model. Our website is hosted through OpenAI Sites and its infrastructure providers. Each independent provider's handling of information is subject to its own terms and privacy policy.
Blockchain and protocol records may be public and are not controlled by Enclave HK Limited. Transactions and public wallet activity can remain available after an app account is removed.
Sharing and tracking
We share information as needed with providers that support the functions described above, when you authorize a transaction, or where disclosure is required by applicable law. Sorro does not sell personal information or use it for cross-app advertising tracking. We have not added advertising analytics or marketing cookies to this website.
Retention and security
We retain information while it is needed to provide the service, resolve disputes, protect accounts, or meet applicable recordkeeping obligations. We use access controls, encrypted network connections, and protected key storage. No service can guarantee absolute security. Data may be processed outside your country, including where our infrastructure and providers operate.
Your choices and requests
You can change app permissions through iOS Settings and inspect trading keys in Sorro's Settings. Embedded-wallet users can revoke supported signing keys in the app; external-wallet users can manage them on Hyperliquid.
You can request access, correction, deletion or other applicable privacy rights by emailing sumer@enclave.money. We may need to verify your identity. Deleting an app account cannot delete on-chain records or close protocol positions automatically. Do not send private keys, seed phrases or authentication codes in a request. We will explain any records that must be retained and why.
Age and policy changes
Sorro's trading services are intended for adults who can lawfully use the relevant products. We do not knowingly seek personal information from children. We may update this policy as the service changes; the effective date above identifies the latest version.