Privacy Policy

1. Introduction

This Privacy Policy explains how Honeypotz Inc (“we,” “us,” “our”), with registered office at 8 The Green, Suite R, Dover, DE 19901, collects, uses, stores, and protects your personal information when you access or use the AI-QUANT platform (“Platform,” “Service”). We are committed to protecting your privacy and handling your data in a transparent and responsible manner.

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree, you must discontinue use of the Service immediately.

2. Information We Collect

We collect the following categories of information:

2.1 Personal Identification Information

• Full name
• Email address
• Username and hashed password
• Billing address and payment details (processed securely through Stripe; we do not store full credit card numbers)
• Phone number (if voluntarily provided)

2.2 Usage and Technical Data

• IP address, browser type, device information, and operating system
• Pages visited, features used, and time spent on the Platform
• Log data, including timestamps of access and actions taken
• Cookies and similar tracking technologies (see Section 7)

2.3 Trading and Strategy Data

• Trade ideas generated on your behalf
• Custom strategies you create using the Strategy Builder
• Paper trading positions and simulated P&L
• Live trading positions, execution records, and account balances (Elite tier)
• Broker API credentials (encrypted at rest) for Elite auto-trading
• Copilot AI chat conversation history

2.4 Third-Party Data

• Market data from Schwab and other data providers
• Payment processing data from Stripe
• Analytics and monitoring data from service providers

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To operate, maintain, and provide the AI-QUANT Platform features you have subscribed to.
• Account Management: To create and manage your account, authenticate you, and communicate with you about your account.
• Billing and Payments: To process subscription payments, manage billing cycles, and handle refunds through Stripe.
• Trading Execution: To generate trade ideas, execute paper or live trades on your behalf (based on tier), and track positions and P&L.
• AI Copilot: To power the Copilot chat assistant with relevant market and portfolio context.
• Improvement and Analytics: To analyze usage patterns, diagnose technical issues, and improve our Service.
• Security: To detect and prevent fraud, unauthorized access, and abuse of the Platform.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Communication: To send service-related notices, updates, security alerts, and support messages. Marketing communications are only sent with your explicit consent.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the specific context:

• Contractual Necessity: Processing necessary to perform our contract with you (e.g., providing the Service you subscribed to).
• Legitimate Interests: Processing for our legitimate business interests, such as improving security, preventing fraud, and analyzing usage, provided these interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, which you may withdraw at any time (e.g., marketing communications).
• Legal Obligation: Processing required to comply with applicable laws and regulations.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy:

• Account Data: Retained while your account is active and for a period of up to three (3) years after account closure for legal and audit purposes.
• Trading Data: Retained for up to seven (7) years to comply with tax and financial record-keeping requirements.
• Chat History: Retained until you delete your account or request deletion. You may clear your Copilot chat history at any time.
• Payment Records: Retained per Stripe’s data retention policies and applicable financial regulations.
• Logs and Analytics: Retained for up to twelve (12) months for security and operational purposes.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who perform services on our behalf, including Stripe (payment processing), cloud hosting providers, email service providers, and analytics services. These providers are contractually bound to protect your data and use it only as directed by us.
• Broker Integration: If you enable auto-trading (Elite tier), your encrypted broker credentials and trade instructions are transmitted to Schwab or Interactive Brokers solely for order execution.
• Legal Requirements: When required by law, court order, subpoena, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as a business asset.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to authenticate users, remember preferences, analyze usage, and deliver a personalized experience. Types of cookies we use:

• Essential Cookies: Required for the Platform to function — including authentication, session management, and security.
• Functional Cookies: Remember your preferences (e.g., dashboard layout, theme settings).
• Analytics Cookies: Help us understand how users interact with the Platform so we can improve it.

You can control cookies through your browser settings. Disabling essential cookies may prevent the Platform from functioning properly.

8. Data Security

We implement industry-standard administrative, technical, and physical security measures to protect your personal information:

• All data in transit is encrypted using TLS 1.3.
• Passwords are hashed using bcrypt with per-user salts.
• Broker API credentials are encrypted at rest using AES-256.
• Database access is restricted to authorized backend services.
• Regular security audits and vulnerability assessments are performed.
• Backups are encrypted and stored in secure, access-controlled environments.

No method of electronic storage or transmission is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right of Rectification: Request correction of inaccurate or incomplete data.
• Right of Erasure (Right to be Forgotten): Request deletion of your personal data, subject to legal retention requirements.
• Right to Restrict Processing: Request that we limit how we process your data under certain circumstances.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@ai-quantrader.com. We will respond within thirty (30) calendar days. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you additional rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: Request deletion of personal information we have collected from you.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out: Opt out of the sale or sharing of your personal information. We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise your California privacy rights, contact us at privacy@ai-quantrader.com or call us at the phone number listed in Section 17.

11. International Data Transfers

Your information may be transferred to, stored, and processed in the United States or other countries where our servers are located. These jurisdictions may have data protection laws that differ from those in your country of residence.

We take appropriate safeguards to ensure your data receives an adequate level of protection, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA, UK, or Switzerland.

12. Children’s Privacy

The AI-QUANT Platform is not directed to, and we do not knowingly collect personal information from, individuals under the age of eighteen (18). If we become aware that a person under 18 has provided us with personal information, we will take steps to delete such information immediately. If you believe we have collected data from a minor, please contact us atprivacy@ai-quantrader.com.

13. Third-Party Links and Services

Our Platform may contain links to third-party websites and services that are not owned or controlled by Honeypotz Inc. We are not responsible for the privacy practices, content, or security of these third parties. We encourage you to review the privacy policies of any third-party services you access through our Platform.

14. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify you and the relevant supervisory authorities within the timeframe required by applicable law (generally within 72 hours of discovery under GDPR). The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address it.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify you by email (to the address associated with your account) and/or by posting a prominent notice on the Platform at least thirty (30) days before the changes become effective. The “Last Updated” date at the top of this page will be revised accordingly. Your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy.

16. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions. Any disputes arising under or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the state and federal courts located in Delaware.

17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: