Privacy Policy

1. Introduction

Polarity Technologies ("Polarity," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, share, and protect information when you use the Polarity platform, website, dashboard, APIs, and related services (collectively, the "Service").

By using the Service, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect:

• Full name
• Email address
• Password (stored as a salted, one-way hash)
• Account creation date and last login timestamps

2.2 Broker API Credentials

When you connect a brokerage account, we collect and store:

• API keys and API secrets for your brokerage accounts (e.g., Alpaca, OANDA, Coinbase)
• Broker account type and environment (live or paper trading)

2.3 Trading and Financial Data

When you use our trading agents, we collect:

• Equity snapshots (periodic account balance and equity readings)
• Trade history (orders placed, filled, and cancelled through our agents)
• Position data (open and closed positions)
• Agent configurations (selected strategies, risk parameters, instruments)
• Performance metrics (profit/loss, high-water mark, fee calculations)

2.4 Payment Information

We use Stripe as our payment processor. When you add a payment method:

• Your payment card details are collected and stored directly by Stripe. We do not store your full card number, CVV, or other sensitive payment card data on our servers.
• We store your Stripe customer ID, subscription status, and payment history (amounts, dates, and statuses) for billing and accounting purposes.

2.5 Usage and Technical Data

We automatically collect:

• IP address and approximate geolocation
• Browser type and version, device type, and operating system
• Pages visited, features used, and interaction timestamps
• Referral source and session duration
• Error logs and performance data

2.6 Cookies and Similar Technologies

We use cookies and similar technologies (local storage, session tokens) to maintain your authenticated session, remember your preferences, and analyze usage patterns. You can control cookie settings through your browser, but disabling cookies may impair your ability to use the Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Operation: To connect to your brokerage accounts, execute trades, monitor positions, and operate our AI trading agents on your behalf.
• Performance Fee Calculation: To calculate net profits, maintain high-water marks, and bill performance fees accurately through Stripe.
• Platform Improvement: To analyze aggregate trading data and strategy performance in order to improve our AI models and trading algorithms. Individual trade data may be used in aggregate, anonymized form to enhance the Polarity Adaptive engine for all users.
• Account Management: To create and manage your account, authenticate your identity, and communicate with you about your account.
• Security: To detect, prevent, and respond to fraud, unauthorized access, and other security threats.
• Communications: To send you transactional emails (trade confirmations, fee receipts, security alerts), product updates, and, with your consent, marketing communications.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Third-Party Brokers: Your API credentials are used to communicate with your brokerage accounts to execute trades and retrieve account data. We transmit only the information necessary to perform these functions.
• Stripe (Payment Processor): We share necessary billing information with Stripe to process performance fee payments. Stripe's handling of your data is governed by the Stripe Privacy Policy.
• Service Providers: We may share information with trusted service providers who assist us in operating the Service (e.g., cloud hosting, analytics, email delivery). These providers are contractually bound to use your information only for the purposes we specify and to protect it in accordance with this Privacy Policy.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of Polarity, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity. We will notify you of any such change and any choices you may have regarding your information.
• Aggregated Data: We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for research, analysis, or marketing purposes.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Specific retention periods include:

• Account Data: Retained for as long as your account is active. Upon account deletion, we will delete or anonymize your personal information within ninety (90) days, except as required by law.
• API Credentials: Deleted immediately upon disconnection of a broker or account termination. We do not retain your API keys after they are no longer needed.
• Trading Data: Equity snapshots and trade history are retained for up to three (3) years after account closure for audit, compliance, and fee dispute resolution purposes.
• Payment Records: Billing and payment records are retained for up to seven (7) years in accordance with tax and accounting regulations.
• Usage Data: Automatically collected technical data is retained for up to twenty-four (24) months.

6. Data Security

We implement technical and organizational measures designed to protect your information, including:

• AES-256-GCM encryption for all stored API credentials.
• TLS/HTTPS encryption for all data transmitted between your browser and our servers.
• Salted, one-way password hashing (bcrypt or equivalent).
• Role-based access controls limiting internal access to sensitive data.
• Regular security audits and vulnerability assessments.
• Secure cloud infrastructure with redundancy and monitoring.

Despite these measures, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your information.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to our retention requirements.
• Data Portability: Request a machine-readable copy of your data, including trade history and performance records.
• Opt-Out:Opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.
• Restriction: Request that we restrict the processing of your personal information in certain circumstances.
• Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at privacy@polaritytrading.com. We will respond to your request within thirty (30) days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: (a) know what personal information we collect, use, disclose, and sell; (b) request deletion of your personal information; (c) opt out of the sale of your personal information (we do not sell personal information); and (d) not be discriminated against for exercising your privacy rights.

To submit a CCPA request, contact us at privacy@polaritytrading.com. We will verify your identity before processing your request.

9. International Data Transfers

Your information may be stored and processed in the United States or any other country where our service providers operate. By using the Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws. We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@polaritytrading.com.

11. Third-Party Links and Services

The Service may contain links to third-party websites or services, including brokerage platforms and payment processors. We are not responsible for the privacy practices or content of these third-party services. We encourage you to review the privacy policies of any third-party services you interact with.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by email or through a prominent notice on the Service at least thirty (30) days before the changes take effect. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: