Privacy Policy

Last updated: April 2026

This Privacy Policy explains how Arbitrage Agent ("we", "us") collects, uses, and protects your personal data. By using the Service, you agree to this policy.

1. Data We Collect

Email address — collected when you join the waitlist or create an account
Exchange API keys — provided by you, encrypted at rest with AES-256-GCM, never shared
Usage data — trade history, P&L, settings stored to provide the Service
Payment data — processed by Stripe; we never store card details

2. How We Use Your Data

To operate and provide the Service
To send waitlist confirmation and launch notifications
To process payments via Stripe
To send service-related communications (no marketing without consent)

3. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

Stripe — for payment processing
Clerk — for authentication
Resend — for transactional emails
Railway — for infrastructure hosting

All processors are bound by their own privacy policies and GDPR-compliant data processing agreements.

4. Your GDPR Rights

If you are in the EU/EEA, you have the right to:

Access — request a copy of your personal data
Rectification — correct inaccurate data
Erasure — request deletion of your data
Portability — receive your data in a machine-readable format
Object — object to processing of your data

To exercise any of these rights, email arbitrage.agent.support@gmail.com. We will respond within 30 days.

5. Data Retention

We retain your data for as long as your account is active. Waitlist emails are retained until you request deletion or the waitlist closes. You may request deletion at any time.

6. Security

Exchange API keys are encrypted using AES-256-GCM with a master key stored in environment variables. Passwords and payment details are never stored by us. We use HTTPS for all data in transit.

7. Cookies

We use session cookies for authentication only. We do not use tracking or advertising cookies.

8. Changes

We may update this policy. We will notify registered users by email of material changes.

9. Contact

Data controller: Arbitrage Agent
Email: arbitrage.agent.support@gmail.com