SUMMARY

We collect only what we need to operate the service. We do not sell your data. ArbEdge is a read-only market intelligence platform — we have no access to your trading accounts or funds.

ArbEdge operates the market intelligence platform at arbedge.app and arbedge.io. We are a data intelligence service only — we do not execute trades, hold funds, or have access to any trading account credentials.

Account Information: When you register via Clerk, we receive your name and email address from your chosen authentication provider (Google, Apple, or email). We do not store passwords — authentication is handled entirely by Clerk, a SOC 2 Type II certified identity provider. Alert Preferences: If you configure email alerts, we store your email address, alert threshold, and symbol watchlist. This is stored in our database and locally in your browser. Usage Data: We collect basic server logs to operate and improve the service. What We Do NOT Collect: Exchange API keys, trading credentials, financial account information, payment data, or any information that would give us access to your funds.

We use your information solely to: · Operate and provide the Service · Send funding rate alert emails you have configured · Send account-related notifications (if applicable) · Improve and develop the platform · Detect and prevent abuse We do NOT use your data to provide trading signals, investment advice, targeted advertising, or share with third parties for marketing.

Your data is stored on Railway.app, a SOC 2 compliant cloud infrastructure provider. Security measures include: · TLS 1.3 encryption for all data in transit · Database encryption at rest · Authentication handled by Clerk (SOC 2 Type II certified) · No plain-text storage of any credentials · Access controls limiting production data access While we implement industry-standard security, no system is impenetrable. See our Security page for full details.

We do not sell, rent, or share your personal data with third parties, except: · Clerk: Authentication provider that handles login · Resend: Email delivery service for alert notifications (your email is passed for delivery only) · Railway.app: Infrastructure hosting provider · Legal requirements: If required by valid legal process None of these providers receive your data for advertising or marketing purposes.

We retain your account data for as long as your account is active. Upon account deletion: · Account data deleted within 30 days · Alert preferences deleted immediately · Email address removed from alert system immediately · Server logs retained for up to 90 days for security purposes

You have the right to: · Access: Request a copy of your personal data · Correction: Update your information via account settings · Deletion: Request deletion of your account and all associated data · Opt-out: Disable email alerts at any time via Settings · Data portability: Export your preferences at any time To exercise these rights, contact [email protected]. We will respond within 30 days.

We use minimal cookies — primarily for authentication session management to keep you logged in. We do not use advertising, tracking, or third-party analytics cookies. No Facebook Pixel, Google Analytics, or similar tracking is embedded on our platform.

ArbEdge is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact [email protected] immediately.

ArbEdge is operated from the United States. If you are located outside the United States, your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the platform. Continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights, contact us at [email protected]. We will respond within 30 days.