Who holds the keys to your wallets?

There are two kinds of wallet here, with different answers. For a connected wallet, one you bring yourself such as Pera, PortMula holds nothing but its public address. For your provisioned agent wallet, the one PortMula creates for your agent, PortMula holds the key, encrypted, so your agent can act while you are away. That is more custodial than a permission you could revoke, not less, and you can always export that key and withdraw everything.

A wallet you connect

A connected wallet is one you already control. PortMula does not hold its key and cannot sign with it. We can ask for a signature, for example when you sign in; only you can give one. No instruction from us and no failure of our systems can move funds out of it. It is how you sign in, and somewhere to fund your agent from and withdraw to. In connected mode your agent's trades are built for it, and each one moves only once you sign it in Pera.

Your agent's wallet

Your provisioned agent wallet is a standard Algorand account. PortMula creates it on the Wallet page once you agree to the wallet terms, and stores its private key encrypted with Amazon's key-storage service. The key is unlocked in memory only when something is signed, when you export it, and when its encryption is renewed, then wiped each time, and it is never written to our logs. That is more custodial than a permission you could revoke, not less, and you can export the key whenever you like.

PortMula holds that key so your agent can work without you: a run keeps going after you close the tab. It signs only what you or your automations ask for, such as paying for data, a trade, or a withdrawal you request.

Can PortMula spend your money?

Not from a connected wallet, ever. From your provisioned agent wallet, our systems are able to sign, and we won't tell you it is untouchable, because that would not be true. Your agent can spend only what is in that wallet, every trade must fit your trade limits once you set them, and every payment is recorded on Algorand for anyone to check.

What protects your agent's wallet

• Export, any time. Export its recovery phrase from the Wallet page, then import it into Pera or any Algorand wallet and use it without us.
• Withdraw, any time. On any plan, whatever your payment status, even if your account is suspended, except where we are legally compelled to freeze funds.
• Only what is in it is at risk. This is beta software, and while funds sit there you are trusting PortMula's systems to protect them. Keep only what you are comfortable with.

Section 4 of the Terms sets this out precisely.