Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Arbitrage Agent ("we", "us") collects, uses, and protects your personal data. By using the Service, you agree to this policy.

1. Data We Collect

Email address — collected when you join the waitlist or create an account
Telegram chat ID — optional; only if you enable Telegram alerts. Verified with a one-time code sent to that chat, used solely to deliver your alerts
Alert & sizing preferences — your ROI threshold, notification toggles, and bankroll figure used to size the guides
Exchange API keys — optional; only if you connect keys for the upcoming automated execution. Encrypted at rest with AES-256-GCM, never shared
Usage data — trade history, P&L, settings, and access logs (endpoint, IP, timestamp) kept for security monitoring
Payment data — processed by Stripe; we never store card details

2. How We Use Your Data

To operate and provide the Service
To send opportunity alerts by email or Telegram, when you enable them
To send waitlist confirmation and launch notifications
To process payments via Stripe
To send service-related communications (no marketing without consent)

3. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

Stripe — for payment processing
Clerk — for authentication
Resend — for transactional emails
Telegram — to deliver alerts to the chat ID you configure
Railway — for infrastructure hosting
Google Analytics & Microsoft Clarity — anonymised usage analytics on the public site (see Cookies below)
Cloudflare Turnstile — CAPTCHA verification on the waitlist form

All processors are bound by their own privacy policies and GDPR-compliant data processing agreements.

4. Your GDPR Rights

If you are in the EU/EEA, you have the right to:

Access — request a copy of your personal data
Rectification — correct inaccurate data
Erasure — request deletion of your data
Portability — receive your data in a machine-readable format
Object — object to processing of your data

To exercise any of these rights, email arbitrage.agent.support@gmail.com. We will respond within 30 days.

5. Data Retention

We retain your data for as long as your account is active. Access logs are automatically deleted after 30 days. Waitlist emails are retained until you request deletion or the waitlist closes. Deleting your account (or your identity provider account) erases your profile, access logs, waitlist entry, and referral records. You may request deletion at any time.

6. Security

Exchange API keys are encrypted using AES-256-GCM with a master key stored in environment variables. Passwords and payment details are never stored by us. We use HTTPS for all data in transit.

7. Cookies

We use session cookies for authentication. The public site also uses Google Analytics 4 and Microsoft Clarity for aggregate usage analytics, which set their own cookies/identifiers. We do not use advertising cookies and we do not sell analytics data.

8. Changes

We may update this policy. We will notify registered users by email of material changes.

9. Contact

Data controller: Arbitrage Agent
Apliki, Nicosia 2613, Cyprus
Email: arbitrage.agent.support@gmail.com