Privacy Policy
Effective date and last updated: October 26, 2026.
This Privacy Policy explains how Horizon Purpose Sdn. Bhd. (registration no. 202401052971 (1598814-H), "Horizon Purpose", "we", "us" or "our") collects, uses, shares and protects information when you use AlphaBitCore Prime ("Prime"), our platform for AI agents. It covers:
- this website, www.alphabitcore.io;
- the Prime web console at your firm's address (for example finance.alphabitcore.io);
- Prime MCP, Prime's connector for AI assistants, when you use Prime from an assistant such as ChatGPT or Claude.
Your firm's agreement with us also applies to the information described here; where the two differ, the agreement governs.
1. Who is responsible for your information
Your firm decides to use Prime and what information to put into it. For the content your firm and its users put into Prime, such as messages, files and documents, we act on your firm's behalf and under its instructions, as set out in your firm's agreement with us. For account, sign-in and security information, and for information about visits to this website, Horizon Purpose is responsible. If you have a question about how your firm uses Prime, you can also contact your firm.
2. What we collect
Visiting this website
This website does not use cookies, analytics or advertising trackers, and it has no forms. Our servers record each request as a service log: your IP address, your browser (user agent), the page requested and the time.
Using Prime
- Account information: your name, user name, email address and, if provided, phone number, organisation, manager and time zone. If your firm signs you in through its own identity provider, we receive your identifier and the profile attributes that provider sends.
- Sign-in and security records: when and how you signed in, whether it succeeded, your IP address and your browser or app (user agent). For Prime MCP, we also record which application connected (for example ChatGPT or Claude) and the access you approved. We store passwords only as protected credentials, and access tokens only as a hash.
- Your content: the messages and instructions you send to Prime's agents and agent teams, including those an AI assistant you connected sends for you; the files you upload; and the documents your firm adds to its knowledge bases.
- What the agents produce: answers, generated files such as reports, charts and spreadsheets, and session titles and summaries.
- Run records: a record of each agent run, including the steps the agent took, the results of the tools it used (which can include third-party data, such as market data and web-search results), and a signed proof-of-execution report.
- Memory: Prime uses an AI model to pick out facts from your conversations, such as your preferences and the topics you work on, so its agents can take them into account later. You can ask us to delete your memories at any time (see section 8).
- Service logs: technical logs of requests and errors, used to run and secure the service.
3. How we use it
We use this information to:
- run the agents and agent teams you ask, and show you your sessions, files and reports;
- check that every request comes from a signed-in user with access to that firm's data. A sign-in for one firm cannot be used with another firm's Prime;
- produce proof-of-execution reports, so your firm can verify what an agent did;
- keep Prime and this website secure, investigate problems and provide support;
- meet legal obligations.
We do not sell your information. We do not use your content to train AI models.
4. Using Prime through ChatGPT, Claude or another AI assistant
When you connect Prime MCP to an AI assistant:
- You sign in with your Prime account, and the assistant can then use Prime only with your access. You can disconnect it at any time in the assistant's settings.
- The assistant sends Prime the requests it makes for you, such as your question for an agent or a file you asked it to upload.
- Prime sends back the results: for example agent answers, session history, file contents, knowledge-document text and proof-of-execution reports. These results can include third-party data that the agents used.
- Once results reach the assistant, the assistant provider's own terms and privacy policy apply to them: OpenAI's for ChatGPT, Anthropic's for Claude. We do not control what the assistant provider does with them.
- Prime handles information that arrives through Prime MCP the same way as information you enter in the Prime console.
5. Who we share it with
We share information only as needed to run Prime:
- Hosting: Amazon Web Services (AWS), which hosts Prime's servers, databases, file storage and logs, and this website.
- AI model providers: to answer your requests, Prime's agents send your prompts, the relevant parts of your conversation, tool results and document text to AI model providers. Prime also sends knowledge-document text and memories to a provider to create search indexes (embeddings). We use Anthropic, OpenAI, Google and DeepSeek, reached through our own model gateway. They process this information to provide their service to us, under terms that do not allow them to train their models on it.
- Data providers: when an agent needs market, economic or web information, Prime sends the provider the query the agent wrote, for example a ticker, a data series or a search phrase. We send them no user or firm identity, but a query can reflect what you asked. Providers include Morningstar, Alpha Vantage, Financial Modeling Prep, Brave Search, and public statistics sources (the U.S. Bureau of Labor Statistics, the U.S. Bureau of Economic Analysis, the Federal Reserve Bank of New York, the Bank of Canada and Statistics Canada).
- Providers for specific agents: firms that use our Thaleon agents also have information processed by Gamma (document layout), Deepgram and Speechmatics (speech to text), and OpenAI.
- Your firm: your firm's administrators can see and manage the content in your firm's Prime.
- Legal reasons: where the law requires it, or to protect the rights and safety of our users or Horizon Purpose.
6. Where it is stored and how it is protected
Prime runs on AWS in the United States (region us-east-1). Prime's databases are not reachable from the public internet. Files are stored encrypted, with public access blocked. Connections to Prime use HTTPS. Each request is checked against the signed-in user and their firm.
If you use Prime from outside the United States, including from Malaysia, your information is transferred to and stored in the United States. Where the law requires a transfer mechanism, we rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.
7. How long we keep it
- Service logs, including visits to this website: 30 days.
- Live progress updates from agent runs: 7 days after the run ends. The run record itself is kept with your content.
- Generated-file links inside sessions: expire after 365 days.
- Content, run records, proof-of-execution reports, memories and sign-in records: for as long as your firm's account is active. When you or your firm ask us to delete them, or when your firm's account ends, we delete them within 30 days, except where the law requires us to keep them longer.
- Billing records: for as long as the law requires.
- Web-search results: kept with the run record that used them.
8. Your choices and rights
- Disconnect an AI assistant: remove Prime in the assistant's connector or app settings. You can also ask us to revoke its access.
- Sessions: you can delete a session in Prime, and it no longer appears in Prime. To have a session and its files erased from our systems, email us.
- Memories, and access, correction, deletion or a copy of your data: email hello@alphabitcore.com. We will respond within 30 days. Where we hold the information for your firm, we will act on your firm's instructions or refer your request to your firm.
You may have further rights under the law that applies to you, including Malaysia's Personal Data Protection Act 2010. To exercise them, contact us as above.
9. Who Prime is for
Prime is a business service for financial firms and their staff. It is not meant for anyone under 18, and we do not knowingly collect information from them. Prime may hold information about your firm's clients that you enter in prompts and files; your firm is responsible for having the right to share it with us.
10. Changes to this policy
If we change this policy, we will update it on this page and change the "last updated" date. If a change materially affects how we handle your information, we will also tell your firm.
11. Contact
For any question or request about Prime and your information, contact us:
- Horizon Purpose Sdn. Bhd. (202401052971 (1598814-H))
- Suite 13A-2, Level 13A, Menara TCM, 215, Jalan Tun Razak, 50400 Kuala Lumpur, Malaysia
- hello@alphabitcore.com