Legal

Privacy Policy

Last updated 2026-10-23.

This Privacy Policy explains how DTS Analytics LLC ("DTS Analytics," "Company," "we," "us," "our"), operating as MarketNewsAPI, collects, uses, shares, and protects personal information when you use marketnewsapi.com, create an account, call the API, open a WebSocket, connect an MCP client, or contact us.

By using the Service you acknowledge this policy. If you do not agree, do not use the Service. This policy is part of the Terms of Service.

The articles in the feed are public news. This policy is about information that identifies you, not about the headlines themselves. If you send your own customers' personal information to us inside a query, you are responsible for having a lawful basis to do that. Do not put secrets, credentials, or government identifiers in a query, a key name, or a support message.

1. Who we are

DTS Analytics LLC is the business responsible for the personal information this policy describes. We work from Sheridan, Wyoming. Questions and privacy requests go to [email protected].

DTS Analytics LLC, 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, USA
Operating as MarketNewsAPI
[email protected]

2. Information we collect

Account information

Identity. Your email address, and a hashed password if you set one. We do not ask for or store your name. If you sign in with Google, we receive your email address and a Google account identifier. We do not receive your Google password, and we do not store the name on the Google profile.
Plan and status. Your plan, trial start, subscription status, and the timestamps of account events.
API keys. A label you choose, a short prefix, the last characters, created and last-used times, a SHA-256 hash of the secret, and an encrypted copy so you can view and copy the key from the dashboard while you are signed in.
Dashboard actions. Keys you create or revoke, billing changes, and MCP connectors you approve. Approving a connector creates a key named for that app.

Billing information

Stripe processes payments. We receive a Stripe customer identifier, subscription status, plan, price, invoices, the billing country Stripe provides, and the last four digits and brand of a card when Stripe provides them. We do not store your full card number or your card security code on our servers.

API, WebSocket, and MCP usage

Request counts per key, HTTP status and error codes, timestamps, the path and query parameters (which can include tickers and search text you submit), and IP addresses.
WebSocket connection times, channels you subscribe to, and message volume.
MCP tool calls, including the arguments your assistant sends, such as a ticker or a search string, and which client connected.

We use this information for authentication, rate limits, the usage charts in your dashboard, abuse prevention, debugging, and security. Query text can reveal what you are researching. Treat a query as information you are willing to have processed as a log.

Messages

If you write to us through the contact form or by email, we keep the message, your email address, and our reply, so we can answer you and keep a record of support.

Website data

Session cookie (mna_session). An HTTP-only cookie that keeps you signed in. It is strictly necessary for the dashboard. Sessions last up to 30 days and renew when you use the account.
Sign-in flag (mna_auth). A cookie the page can read so the navigation knows you are signed in. It does not contain your password or your API key.
Cookie choice. mna-cc records whether this browser is in a region where we ask before optional cookies. mna-consent records Accept all or Reject all. See Section 4.
Browser storage. Your theme (mna-theme) and, if you set one, a language preference. The documentation playground can store an API key you paste (mna-pg-key) in that browser only, so you do not have to paste it again. That key never has to be entered. Clear it by clearing site data for this domain.

We do not use advertising cookies. Google Analytics measures page views on this site, as described in Section 4. Server logs still record ordinary request data, including IP address, user agent, and the URL, for security and operations.

AI enrichment of articles

Separately from your account, we send article text to an AI provider so the feed can include a summary and entities. That processing is about the article, not about your identity. We do not send your account profile, your payment details, or your API keys to the enrichment provider. See the AI Policy.

3. How we use information

Provide the Service. Create and secure your account, authenticate calls, enforce plan limits, deliver articles, and show usage in the dashboard.
Bill you. Start and renew subscriptions, issue invoices, and handle failed payments.
Write to you. Send transactional email: account and password messages, receipts, trial and renewal notices, and important service notices. Market Pulse, the Monday, Wednesday, and Friday letter, is sent only if you subscribe. Every issue has an unsubscribe button, and a signed-in account can turn it off in settings. We do not add you to it because you created an account.
Support. Answer questions and investigate a bug you report.
Protect the Service. Detect abuse, compromised keys, fraud, and attacks, and enforce the Terms and the Acceptable Use Policy.
Improve the product. Understand aggregate error rates, latency, and which features fail. We use aggregated counts for this. We do not sell personal information, and we do not use your queries to train a public foundation model.
Legal duties. Comply with tax, accounting, and other law, and respond to valid legal process.

Where the laws of the European Economic Area, the United Kingdom, or Switzerland apply, the legal bases for these uses are in Section 11.

4. Cookies and similar technologies

We use these cookies and similar storage:

Strictly necessary. mna_session and mna_auth, described above. The session cookie is HTTP-only and SameSite=Lax. Both are Secure when the site is served over HTTPS. Blocking them means you cannot stay signed in.
Consent. mna-cc records whether this browser is in a region where we ask before optional cookies. It lasts one day. mna-consent records Accept all or Reject all and lasts six months. Both are necessary to remember that choice. They do not track you across other sites.
Preferences. mna-theme in local storage, so the page opens in the theme you chose. This is not sent to us as a cookie.
Playground. If you paste a key into the docs playground, it stays in local storage on that browser. It is there for your convenience. Anyone with access to that browser profile can read it.
Analytics. Google Analytics sets _ga cookies to count visits and see which pages are used. The tag is G-188BNFPWSB. It receives the page URL, a client identifier, and approximate location. It does not receive your API key.

Visitors in the European Economic Area, the United Kingdom, and Switzerland see a cookie banner before any optional cookie is set. Necessary cookies stay on either choice. Google Analytics stays off until you choose Accept all. Reject all does not limit the product. Outside those regions the banner is not shown, and the analytics tag runs with the necessary cookies.

We do not set advertising or cross-site tracking cookies. You can clear cookies and site data in your browser. Clearing them signs you out, forgets the cookie choice, and removes the playground key from that browser.

5. How we share information

We share personal information with these categories of recipients, and only as needed for the purpose described:

Stripe. Payment processing, subscriptions, invoices, and the customer portal. Stripe's terms and privacy policy apply to the payment transaction.
Google. Only if you choose Google sign-in. Google authenticates you under its own privacy policy and returns the profile fields in Section 2.
Google Analytics. Page measurements for marketnewsapi.com, under the cookie choice in Section 4. Google's privacy policy applies to that measurement.
Email delivery. Resend sends transactional email on our instructions. The message contains the address and the content of that email.
Hosting and network. The servers that run the site, the API, the database, and the search index process the data required to answer a request. When traffic passes through Cloudflare, we may receive the connecting IP from Cloudflare's headers, and Cloudflare processes connection data under its own terms as our network provider.
AI provider. Article text is sent to MiniMax (currently MiniMax-M3.1-Flash, which we may change), to produce summaries and entities. We do not authorize that provider to use your personal account data to train its public models. Your MCP client's own provider, such as Anthropic or OpenAI, receives the prompt you type into that client. That processing is between you and the client. We receive the tool call and return articles.
Market-data source for the website. The website may request delayed prices for tickers you are looking at. That request contains symbols, not your name. It is not part of the API response.
Professional advisers and authorities. Lawyers, accountants, and insurers where we need them, under a duty of confidence. We also disclose information if a law, a court, or a government request requires it, or if we believe disclosure is necessary to protect the rights, safety, or property of our customers, the public, or us.
A buyer of the business. If we merge, are acquired, or sell the business, account information can transfer to the successor, who will be bound by this policy or a policy that gives you the same practical protections. We will tell you if a transfer changes who controls your account.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not give your email address to publishers whose articles appear in the feed.

6. International transfers

We are based in the United States. Your information is processed in the United States and may be processed in other countries where our providers operate, including where Stripe, Google, Resend, Cloudflare, or MiniMax runs its systems. Those countries may have data-protection laws that differ from the laws where you live.

Where the law that applies to a transfer from the European Economic Area, the United Kingdom, or Switzerland requires a safeguard, we use an appropriate mechanism such as Standard Contractual Clauses. You may ask us for a summary of the safeguard that applies to your information.

7. Retention

Account data is kept while the account is open. When you delete the account, or when we close it, we delete or de-identify the profile, keys, and dashboard records within 30 days, except for the records in the following bullets.
Billing records are kept for as long as tax, accounting, and payment-network rules require. That period is commonly several years. Stripe keeps its own copy under its policy.
Detailed request logs are kept for 90 days. Aggregated daily counts that do not identify you may be kept longer, including after the account is gone, because they are how we understand capacity and errors.
Support messages are kept while we need them to handle the request and for a reasonable period afterward in case the same issue returns, and then deleted or de-identified.
Backups age out on their ordinary cycle. A deleted account can remain in a backup until that cycle overwrites it. We do not restore a deleted account into production except to meet a legal duty.

8. Security

Passwords are hashed with scrypt. API key secrets are stored as a SHA-256 hash and an encrypted copy so you can view the key again while signed in.
The session cookie is HTTP-only. Traffic to the site and the API is encrypted with TLS.
Access to production systems is limited to the people who operate the Service.
You can revoke a key without closing the account. You should revoke a key that may have leaked, and you should use a unique password.

No method of transmission or storage is perfectly secure. We cannot guarantee absolute security. If we learn of a breach of personal information that the law requires us to announce, we will notify you and the authorities the law names.

9. Your privacy rights

Depending on where you live, you can ask us to:

Access the personal information we hold about you, and receive a copy.
Correct information that is wrong. Email [email protected] if the email address on the account needs to be changed.
Delete the account, in dashboard settings or by email. Deletion is subject to the retention rules in Section 7. Deleting the account cancels a paid subscription.
Export a copy of your account information in a commonly used format.
Object or restrict certain processing, where the law gives you that right.
Withdraw consent where we rely on consent. Withdrawing it does not affect processing that already happened.
Appeal a decision on a privacy request, where your state's law provides an appeal.

Email [email protected] to make a request. We may need to verify that the request comes from the account holder, which we usually do by writing to the email on the account. You may use an authorized agent where the law allows it, with proof of authorization. We will respond within the time the applicable law requires. We will not discriminate against you for making a request.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you may also lodge a complaint with your local data-protection authority.

10. Supplemental notice for California residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the rights to know, delete, correct, and opt out of sale or sharing, and the right not to be discriminated against for exercising them. You may also limit the use of sensitive personal information where the statute applies.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are used in California law. We do not use sensitive personal information for purposes other than providing the Service, securing it, and meeting legal duties. We do not knowingly sell the personal information of anyone under 16.

In the last 12 months we have collected the categories in Section 2: identifiers (name, email, IP address, key prefix), commercial information (plan and subscription status), internet activity (requests, queries, and connector events), and professional information you choose to put in a support message. We collect them from you, from your browser, and from the processors in Section 5. We disclose them to those processors for the business purposes in Section 3.

To submit a request, email [email protected]. You may designate an authorized agent with written authorization. We will verify the request as Section 9 describes.

11. European Economic Area, United Kingdom, and Switzerland

If those laws apply, our bases for processing are:

Contract. Processing needed to provide the account, the API, billing, and support you asked for.
Legitimate interests. Securing the Service, preventing abuse, keeping logs for a limited time, and understanding aggregate reliability, balanced against your rights. You may object to processing based on legitimate interests.
Consent. Where we ask for it, including the cookie choice in Section 4 and any optional message you opt into. You may withdraw consent at any time by clearing that choice in your browser, or by emailing us.
Legal obligation. Tax, accounting, and other duties the law imposes.

You can exercise the rights in Section 9, including access, correction, deletion, restriction, portability, and objection. You can complain to your supervisory authority. You can also contact us first at [email protected] and we will try to resolve it.

12. Children's privacy

The Service is not directed to anyone under 13, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, email [email protected] and we will delete it.

13. No financial advice

News, summaries, and any price shown on the site are information, not investment, financial, trading, tax, or legal advice. DTS Analytics is not a broker-dealer, investment adviser, or fiduciary. Read Section 9 of the Terms of Service and the AI Policy.

14. Third-party links

Articles link to the original publisher. The site may link to documentation of third-party tools. Those sites have their own privacy practices. A link is not an endorsement, and we are not responsible for a site we do not operate.

15. Changes to this policy

We may update this policy by posting a new version and changing the "Last updated" date. If a change is material, we will notify you by email or through the dashboard before it applies, where the law requires notice. If you keep using the Service after the effective date, the updated policy applies to information we collect from that date forward.

16. Contact

Privacy requests and questions about this policy:

DTS Analytics LLC, 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, USA
Operating as MarketNewsAPI
[email protected]