Privacy Policy

1.1 Scope

This Privacy Policy applies to information we process in connection with the Services, including information collected through our website(s), web application(s), mobile experiences (if any), and support channels.

1.2 Definitions

• Personal Data (or Personal Information) means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with an identified or identifiable individual or household, as defined under applicable law.
• Sensitive Personal Information has the meaning given under applicable law (including California law), and generally includes certain categories of information that are subject to additional protections.
• De-Identified Data means data processed so it cannot reasonably be used to identify an individual, consistent with applicable law and commercially reasonable practices.
• Processing means any operation performed on data (e.g., collection, storage, use, disclosure, analysis, deletion).

3.1 Information You Provide Directly

Depending on how you use the Services, you may provide:

• Account and profile data (e.g., name, username, email, phone number, preferences, notification settings)
• User Content (e.g., strategies, prompts, watchlists, notes, uploads, feedback, and other content you submit)
• Communications (e.g., messages to support, surveys, bug reports, customer service interactions)
• Any other information you choose to provide in connection with your use of the Services

3.2 Information We Collect Automatically

When you use the Services, we (and our service providers) may automatically collect:

• Identifiers and device/network data (e.g., IP address, device identifiers, cookie IDs, browser type, operating system, language, timezone, carrier, approximate location derived from IP)
• Usage and telemetry data (e.g., pages/screens visited, time spent, click paths, feature usage events, in-app interactions, session metadata such as timestamps and session duration)
• Diagnostics and security data (e.g., crash logs, performance metrics, error reports, fraud/abuse signals, log files, access times)

3.3 Cookies, SDKs, and Similar Technologies

We may use cookies, pixels, SDKs, local storage, and similar technologies for purposes such as:

• Authenticate users and maintain sessions
• Remember preferences
• Perform analytics and measurement
• Prevent fraud and maintain security

If and when we enable advertising or marketing measurement technologies that trigger additional legal notice/choice obligations, we will update this Privacy Policy and provide any required notices and choices.

3.4 Strategy and Product Analytics Data

We may collect and generate data about how the Services are used and how features perform, including:

• Feature usage metrics
• User retention and engagement statistics
• Strategy creation counts (aggregate)
• Indicator usage patterns (aggregate)

3.5 AI Interaction Data; Prompts, Inputs, Outputs, and Token Metrics

If you use AI Features, we may process and store:

• Inputs you provide (including prompts, context, instructions, and strategy parameters)
• Outputs generated by the Services
• Interaction signals (e.g., ratings, corrections, accept/reject events, follow-on edits)
• Safety and quality signals (e.g., detected abuse patterns, policy enforcement events)

Separately, we may collect information such as token counts and similar usage measurements related to AI Features. Token counts are quantitative usage metrics (e.g., counts, rates, or limits) and are distinct from the substantive text of your prompts or outputs. Token counts may be stored and analyzed in De-Identified and/or aggregated form for analytics, capacity planning, product improvement, and billing (if applicable).

3.6 Brokerage Connectivity / Integrations

If you choose to connect third-party services (including brokerage connectivity providers or execution-related services), we may receive and process data as authorized by you and the integration permissions you grant. We may also generate technical telemetry about the connection (e.g., connection status, connection usage, and aggregate latency/lag metrics) to operate, secure, and improve the integration experience.

3.7 Derived and Inferred Data

We may derive or infer information from the above categories (e.g., likely feature interests, estimated sophistication level, churn propensity) to personalize and improve the Services, as well as for other related purposes subject to applicable law and any required opt-outs.

5.1 Use of User Content for Service Operation and Improvement

Consistent with our Terms of Service, we may process User Content (including AI Inputs and Outputs) to provide the Services and to develop, improve, and test the Services and AI Features, unless prohibited by law or restricted by settings we provide.

5.2 De-Identified and Aggregated Use

We may create and use De-Identified Data derived from User Content and your use of the Services for analytics, benchmarking, research, safety, and product improvement. We do not attempt to re-identify De-Identified Data except as permitted by law (for example, to test de-identification safeguards).

5.3 Strategy Content Commitments

We will not sell your identifiable strategy content to third parties. We will not use your identifiable strategy content to operate, seed, or manage a fund, ETF, or proprietary trading system without your explicit consent. We may use De-Identified Data and aggregated analytics derived from strategy usage and performance as described in this Privacy Policy and the Terms of Service.

6.1 Service Providers and Processors

We share information with vendors and service providers that help us operate the Services (e.g., hosting, analytics, customer support, communications, security monitoring, infrastructure, error tracking). These parties are authorized to process information on our behalf consistent with this Privacy Policy.

6.2 Integrations You Enable

If you choose to connect third-party services, we will share and receive information with those services as necessary to provide the integration, consistent with your permissions and instructions.

6.3 Legal, Safety, and Compliance

We may disclose information to comply with law, respond to lawful requests, protect our rights, protect users, investigate fraud or security issues, and enforce our agreements.

6.4 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be disclosed and transferred as part of that transaction, subject to customary confidentiality protections.

7.1 Account Controls

You may be able to access and update certain information through your account settings (e.g., profile details, notification preferences).

7.2 Cookies and Similar Technologies

Where required, we provide cookie consent controls. You can also manage cookies through your browser settings. Note that disabling certain cookies may affect functionality.

7.3 Marketing Communications

If we send marketing emails, you can opt out by using the unsubscribe link in those messages. We may still send non-promotional service communications (e.g., security or transactional notices).