Privacy Policy

1. Overview

This Privacy Policy describes how arBtrage.com ("we", "us", "our", "arBtrage") collects, uses, and discloses information about visitors and registered users of the Service. By using the Service, you consent to the data practices described in this policy.

We have designed the Service to minimize the personal data we collect. We do not sell personal data, and we do not share personal data with third parties for advertising purposes.

2. Information We Collect

Information you provide directly

If you create an account, we collect the email address you supply and a hashed copy of your password. We use this information solely to authenticate you and to communicate operationally about your account.

If you contact us, we may retain copies of your communications to respond to inquiries and to maintain records.

Information collected automatically

When you use the Service, our servers and infrastructure providers automatically collect certain technical information, including: your IP address, browser type and version, operating system, referring URL, pages requested, dates and times of access, and approximate geographic location (city / country level) inferred from your IP address. This information is collected through standard web server logs and is used to operate and secure the Service.

We use first-party cookies and session storage only as strictly necessary to operate the Service — for example, to keep you signed in, to remember filter preferences, and for security purposes (CSRF protection). We do not use third-party advertising cookies or behavioral tracking pixels.

3. How We Use Information

We use the information we collect for the following purposes:

• To operate, maintain, and provide the Service to you
• To authenticate registered users and protect against fraud, abuse, and unauthorized access
• To analyze aggregated usage patterns and improve the Service (e.g., understanding which panels are most viewed)
• To enforce our Terms of Service and comply with legal obligations
• To respond to your inquiries and operational communications

We do not use personal data for advertising, behavioral profiling, or sale to third parties.

4. Sharing of Information

We do not sell, rent, or trade personal information to third parties. We may share information in the following limited circumstances:

• Infrastructure providers: we use cloud hosting and content delivery providers (such as DigitalOcean) to operate the Service. These providers process server logs and connection data as part of normal operations.
• Legal compliance: we may disclose information when required by law, court order, or other valid legal process, or to protect the rights, property, or safety of arBtrage, our users, or the public.
• Business transfers: in the event of a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction. We will notify users of any material change in ownership or use of personal data.

5. Data Retention

We retain personal information only for as long as necessary to provide the Service and to comply with our legal obligations. Server logs are typically retained for 30–90 days for security and operational purposes. Account information is retained for as long as your account is active; you may request deletion at any time (see Section 8).

6. Security

We implement industry-standard administrative, technical, and physical safeguards to protect information from unauthorized access, disclosure, alteration, or destruction. These include TLS encryption for all traffic, password hashing using accepted cryptographic standards, isolated database access, and regular security updates.

However, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security, and you acknowledge that any information you provide is transmitted at your own risk.

7. Third-Party Data Sources

The Service displays publicly available financial data sourced from third parties including Nasdaq, the U.S. Securities and Exchange Commission EDGAR system, Yahoo Finance, and other public APIs. We do not collect personal data about you on behalf of these third parties; we simply fetch publicly available market data and display it within the Service.

Links to external sites (such as Nasdaq, broker pages, or news sources) are provided for convenience. We are not responsible for the privacy practices of those external sites.

8. Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your personal information, including the right to access, correct, delete, or restrict our processing of your information.

To exercise these rights, you may delete your account through the account settings page (when available) or by sending a request to us. We will respond to verifiable requests within a reasonable timeframe and in accordance with applicable law.

California residents: The California Consumer Privacy Act (CCPA) grants California residents specific rights, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. arBtrage does not sell personal information.

European Economic Area (EEA), United Kingdom, and Swiss residents: The General Data Protection Regulation (GDPR) and similar laws grant you specific rights regarding your personal data. The legal basis for our processing is (a) performance of the contract represented by these Terms, (b) our legitimate interests in operating and securing the Service, and (c) your consent where applicable.

9. Children's Privacy

The Service is not directed to children under the age of 18, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete that information promptly.

10. International Data Transfers

The Service is operated from servers located in the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where our infrastructure providers operate. By using the Service, you consent to such transfers.

11. Do Not Track

We do not currently respond to "Do Not Track" browser signals. As stated above, we do not use third-party advertising or behavioral tracking technologies on the Service.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this policy and, for material changes, we will provide additional notice through the Service or by email. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.