Privacy Policy

1. Information We Collect

We collect the following categories of information to provide and improve our services:

• Account information — your name, email address, and password when you create an account.
• Portfolio data — ticker positions, quantities, optional cost basis, and watchlist entries you enter manually. hedg3 does not connect to brokerages or execute trades.
• Usage and analytics data — pages visited, features used, device type, browser, IP address, and interaction patterns that help us understand how the platform is used.
• Cookies — small data files stored on your device to maintain sessions, remember preferences, and support optional analytics. See Section 7 for details.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and maintaining the hedg3 platform, including account management and customer support.
• Analyzing your portfolio to generate allocation insights, drift detection, and performance summaries.
• Producing general, non-personalized market analytics such as analyst rankings, options screeners, and market alerts.
• Delivering alerts tied to your portfolio — earnings events, analyst rating changes, insider activity, and more.
• Improving our models, features, and overall user experience.

3. Data Sharing

We do not sell your personal data. We share information only with the following categories of third-party service providers, and only to the extent necessary to operate the platform:

• Payment processing — to take subscription payments. Our payment processor receives only the payment information necessary to complete transactions; we do not store your full card details.
• Cloud infrastructure and hosting — where the platform runs and your data is processed and stored, under that provider's security and compliance standards.
• Authentication and account security — to sign you in, verify your identity, and protect accounts from unauthorised access.
• Error monitoring and analytics — to detect faults and understand how the product is used, so we can fix and improve it.
• Voice and AI processing — when you use the voice assistant or an AI-generated summary, your request (including a voice recording and its transcript) is sent to a third-party speech and language-model provider to produce the response.
• Email and notification delivery — to send account, alert, and subscription messages you have asked for.

We may also disclose information if required by law, regulation, or legal process.

We do not use your personal information to train large language models. We do not train, fine-tune, or develop any AI model on your data, and we do not sell or share it for that purpose. Where a request is sent to a third-party language-model provider to generate a response, we use those providers under commercial terms that do not permit your data to be used to train their models.

4. Data Security

We take the security of your data seriously. All data is encrypted in transit using TLS and at rest using AES-256 encryption. Sensitive credentials and secrets are held in a managed key -management service and are never stored in plaintext. Access to production systems is tightly controlled and audited.

5. Data Retention

We retain your account and portfolio data for as long as your account is active. If you close your account or request deletion, we will remove your personal data within 30 days, except where retention is required by law or necessary to resolve disputes. De-identified, aggregated data may be retained indefinitely for analytical purposes.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate or incomplete information.
• Deletion — request that we delete your personal data, subject to legal obligations.
• Data export — request a portable copy of your data in a commonly used format.

To exercise any of these rights, please contact us at [email protected].

7. Cookie Policy

We use two categories of cookies:

• Essential cookies — required for authentication, session management, and core platform functionality. These cannot be disabled.
• Analytics cookies — optional cookies that help us understand usage patterns and improve the platform. You may opt out of analytics cookies at any time through your account settings.

8. Children's Privacy

hedg3 is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected information from a child under 13, we will promptly delete it. If you believe a child has provided us with personal data, please contact us at [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at the address associated with your account at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please reach out to us:

[email protected]