Sage does not hold custody of your funds. Telegram can create a user-controlled Privy wallet, but Sage stores only wallet references and addresses; it never renders or stores private keys.

Sage does not execute trades on your behalf until a separately reviewed live execution rail is enabled. Copy-trade and auto-trade controls are dry-run, policy-gated, and audited.

Sage does not bypass geofencing. If your IP resolves to a region a venue does not serve, the venue's UI will reject the trade — Sage is not in that loop and does not try to be.

Sage emits signed intents: structured records describing what a caller suggests and which user asked to mirror it. The signal and ticket records are auditable in /signals, /ops/copy-trade, and /ops/audit.

Auto-copy, when enabled per-caller per-user, creates a paper ticket and sends the user an intent link. It never submits to Polymarket or Kalshi from the dashboard.

Every signal row + every market row has an 'open on Polymarket / Kalshi' deep-link button that opens the venue page in a new tab. Sage does not embed the venue's iframe or execute on the venue side.

Do not paste secrets (API keys, tokens, wallet seeds) into any Sage surface — neither Discord, the dashboard, nor support channels. Sage staff will never ask for them.

The dashboard stores your Discord user ID, current tier, linked notification channels, follows, paper tickets, signed intent metadata, and audit rows. It does not store private keys. See the privacy-data doc for the full data inventory.

Paper-trade first. Watch the signal feed for a week before you put a dollar on anything. The leaderboard shows hit rate + avg edge per caller — that's the data your gut needs to calibrate.

Read the thesis. A signal without a why is not a signal worth taking. If you can't articulate the caller's edge after reading their note, skip the trade.

Size for the worst case. The risk-sizing doc has the full discipline; the short version: no single trade should be able to blow up your day, week, or month. Use /account/risk as your guardrail preview and keep your actual venue limits aligned.

Verify the venue's URL before pasting any amount. Sage's deep-link buttons go to the canonical Polymarket / Kalshi page — but a stray hand-typed URL or a phishing link in a DM is a separate problem we cannot guard against.

Report anything that smells off. If a verified caller is firing signals that look manipulative (front-running, pump-and-dump shaped), the report-abuse doc tells you exactly where to flag it. Ops reviews every report.