PRIVACY POLICY

1. Introduction

STRIX ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the STRIX platform ("Platform"). Please read this policy carefully. By using the Platform, you consent to the practices described herein.

2. Information We Collect

Account Information: When you register, we collect your full name, email address, username, and password (stored as a secure hash).

Brokerage Connection Data: To enable trading functionality, we store encrypted authentication tokens linking your Platform account to your brokerage account. We do not store your brokerage password.

Trading Activity: We collect data on trades executed through the Platform, including symbols, quantities, prices, timestamps, and profit/loss figures.

Usage Data: We automatically collect information about how you interact with the Platform, including pages visited, features used, and session timestamps.

Billing Information: Payments are processed by Stripe. We store your subscription plan and status but do not store full credit card numbers. Stripe's privacy policy governs payment data.

Communications: If you contact us via email or support channels, we retain those communications to assist you.

3. How We Use Your Information

• To operate, maintain, and improve the Platform and its AI trading features
• To execute trades and manage your connected brokerage account per your instructions
• To process subscription payments and send billing communications
• To send transactional emails (account confirmation, trade notifications, alerts)
• To train and improve our AI models using aggregated, anonymized trading data
• To detect and prevent fraud, abuse, and security incidents
• To comply with applicable laws and legal obligations

4. How We Share Your Information

We do not sell your personal data. We may share information only in the following circumstances:

• Service Providers: We share data with third-party vendors who help us operate the Platform (e.g., Stripe for payments, email delivery services). These parties are contractually bound to protect your data.
• Brokerage Connection: To enable trading, authentication tokens are transmitted to your connected brokerage's API. No personal information beyond what is required for authentication is shared.
• Legal Requirements: We may disclose your information if required by law, subpoena, court order, or to protect the rights, property, or safety of STRIX or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• AES encryption for all stored brokerage credentials and authentication tokens
• Bcrypt hashing for passwords — your plaintext password is never stored
• HTTPS/TLS for all data in transit
• Access controls limiting data access to authorized personnel only

No method of transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. Trade history and usage data may be retained for up to 7 years for regulatory compliance purposes. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request your data in a machine-readable format
• Opt-out: Opt out of non-essential communications at any time

To exercise any of these rights, contact us at support@strixalgo.ai.

8. Cookies & Tracking

We use session cookies solely to maintain your authenticated session. We do not use third-party tracking cookies, advertising pixels, or analytics services that share your data with external parties. You may disable cookies in your browser settings, though this will prevent you from remaining logged in.

9. Children's Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will delete it promptly.

10. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Platform at least 30 days before the change takes effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by the laws of the State of Minnesota, United States.

13. Contact Us

For privacy-related questions, requests, or concerns, contact us at:

• Email: support@strixalgo.ai