Privacy Policy

1. Information We Collect

We collect the following categories of information to provide and improve our services:

• Account information: your name, email address, and password when you create an account.
• Portfolio data: ticker positions, quantities, optional cost basis, and watchlist entries you enter manually. hedg3 does not connect to brokerages or execute trades.
• Usage and analytics data: pages visited, features used, device type, browser, IP address, and interaction patterns that help us understand how the platform is used.
• Cookies: small data files stored on your device to maintain sessions, remember preferences, and support optional analytics. See Section 8 for details.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and maintaining the hedg3 platform, including account management and customer support.
• Analyzing your portfolio to generate allocation insights, drift detection, and performance summaries.
• Producing general, non-personalized market analytics such as analyst rankings, options screeners, and market alerts.
• Delivering alerts tied to your portfolio: earnings events, analyst rating changes, insider activity, and more.
• Improving our models, features, and overall user experience.

3. Data Sharing

We do not sell your personal data. We share information only with the following categories of third-party service providers, and only to the extent necessary to operate the platform:

• Payment processing: to take subscription payments. Our payment processor receives only the payment information necessary to complete transactions; we do not store your full card details.
• Cloud infrastructure and hosting: where the platform runs and your data is processed and stored, under that provider's security and compliance standards.
• Authentication and account security: to sign you in, verify your identity, and protect accounts from unauthorised access.
• Error monitoring and analytics: to detect faults and understand how the product is used, so we can fix and improve it.
• Voice and AI processing: when you use the voice assistant or an AI-generated summary, your request (including a voice recording and its transcript) is sent to a third-party speech and language-model provider to produce the response.
• Email and notification delivery: to send account and billing email, the newsletters you subscribe to, and the push notifications you have asked for.

We may also disclose information if required by law, regulation, or legal process.

We do not use your personal information to train large language models. We do not train or fine-tune any AI model on your data, and we do not sell or share it for that purpose. Where a request is sent to a third-party language-model provider to generate a response, we use those providers under commercial terms that do not permit your data to be used to train their models.

We may use text you enter into our research and strategy tools, after removing contact details, government and account identifiers, and payment details, together with the result our tools produced from it, to test and improve those tools and to compare the language models behind them. The copy we use for this is stored without a link to your account, is processed only on our systems and by our model providers, and is deleted within 90 days.

4. Data Security

We take the security of your data seriously. All data is encrypted in transit using TLS and at rest using AES-256 encryption. Sensitive credentials and secrets are held in a managed key -management service and are never stored in plaintext. Access to production systems is tightly controlled and audited.

5. Data Retention

We retain your account and portfolio data while your account is active. When you close your account or request deletion, we delete your personal data within 30 days, except the order audit record below and data that law or an open dispute requires us to keep. De-identified, aggregated data may be retained indefinitely for analytical purposes.

Order audit record: each action you take on a followed order or exit (approve, decline, re-apply, edit, cancel) and your agent's report of its acknowledgement and fill are kept for 7 years from the action, including after your account is deleted. The IP address and browser user agent recorded with an action are kept for 90 days.

Security and activity records: sign-in, checkout, plan-change, and other account events are recorded with the IP address and browser user agent they came from. We keep them for about 18 months (550 days) while your account exists and delete them with your account. Terminal setup records, from the terminal sign-in to each arm, disarm, and paper start or stop, keep the request's IP address and browser or agent string for 550 days.

Standing authorization for automated follow orders: when you sign it and when you withdraw it, we record the IP address and browser user agent you used. We keep them while the authorization is in force and for 7 years after you withdraw it, then delete them. We keep the record of the authorization itself while your account exists.

6. Agent Chat

Agent chat is kept for 90 days. We don't store any contact information or account and card details and passwords. You can delete it anytime from the agent room.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request that we delete your personal data, subject to legal obligations.
• Data export: request a portable copy of your data in a commonly used format.

To exercise any of these rights, please contact us at [email protected].

8. Cookie Policy

We use two categories of cookies:

• Essential cookies: required for authentication, session management, and core platform functionality. These cannot be disabled.
• Analytics cookies: optional cookies that help us understand usage patterns and improve the platform. You may opt out of analytics cookies at any time through your account settings.

9. Children's Privacy

hedg3 is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected information from a child under 13, we will promptly delete it. If you believe a child has provided us with personal data, please contact us at [email protected].

10. Text Messages (SMS)

A mobile number is optional and never required to create an account. A number can be entered at sign-up, in a “Mobile number (optional)” field above a separate, optional, unticked checkbox, or added later in Settings. The box can be ticked only once a number is typed and covers only that number; unticked, no text is sent and the number is not saved. A number added later is consented in Settings. Each number is confirmed with the code we text. hedg3 texts a mobile number only after you agree to the words shown beside it.

• What we send: one-time codes and account alerts about your own account. We do not send marketing by text.
• What we keep: your mobile number, and a record of each consent and opt-out: when it happened, the exact words you agreed to and their version, and whether you used the website or the app.
• How to stop: reply STOP to any message, or remove the number in Settings. Reply UNSTOP to resume, HELP for help, or email [email protected].

Message frequency varies. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. We do not share your mobile number or SMS opt-in with third parties for their marketing. Our text message delivery provider receives your number only to deliver our messages.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at the address associated with your account at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please reach out to us:

[email protected]