2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Register for an account
• Express interest in obtaining information about us or our products
• Participate in activities on the Service
• Contact us with inquiries or feedback

This information may include:

• Name and contact information (email address, phone number)
• Account credentials (username, password)
• Profile information
• Payment information (stored securely by our payment processors)
• Subscription details and AI credit purchases
• Communications you send to us

2.2 Trading and Financial Data

To provide our core services, we collect and process your trading and financial data, including:

• Trading activity and history from connected platforms
• Portfolio information
• Trading performance metrics
• API access tokens for third-party services (stored securely)

2.3 Automatically Collected Information

When you access our Service, we automatically collect certain information, including:

• Device and usage information (IP address, browser type, operating system)
• Usage patterns and preferences
• Cookies and similar tracking technologies (see our Cookie Policy)
• Log data (access times, pages viewed, time spent on pages)

2.4 AI Feature Data

When you use AI features — including AI Pine editing, the Algo Lab's Algo Agent, and any autonomous research loop you trigger — we process the content you submit and generate, such as:

• Prompts, instructions, and Pine Script source you submit or load into the editor
• Case Study state passed to the agent each turn (active strategy code, recent trial results, mission state, research lessons)
• Backtest tool output (metrics, trade samples, equity-curve summaries) returned to the agent
• AI-generated outputs, candidate variants, and suggested code
• Usage metadata (timestamps, request sizes, token counts, cache hit rates, credit usage) for billing and abuse prevention

This content is transmitted to third-party large-language-model providers as described in Section 4.7. The AI Backtesting Lab does not transmit broker credentials, account numbers, or fills to the model provider; only the strategy code, configuration, and derived backtest metrics needed to reason about the strategy are sent.

2.5 Affiliate and Referral Attribution Data

If you arrive through an affiliate, partner, or referral link and provide marketing consent, we may use Endorsely referral state to connect signups and checkout events to approved affiliate campaigns. Our internal records retain the Endorsely referral identifier and Stripe checkout or invoice identifiers needed for reconciliation. We do not intentionally store raw full referrer URLs for affiliate attribution.

When an attribution becomes connected to a paid checkout, we may retain finance-grade records such as Stripe customer, session, subscription, invoice, payment intent, amount, tax, discount, refund, commission basis, Endorsely referral identifier, and reversal reason so we can reconcile payments, fraud reviews, refunds, chargebacks, tax records, and affiliate payouts.

4.1 Third-Party Service Providers

We may share your information with third-party vendors, service providers, contractors, and agents who perform services for us, including:

• Data analytics providers
• Error-monitoring providers. When an application error occurs, our error-monitoring service may capture a short session replay of the interface around the error to help us diagnose and fix it; all typed input is masked and credential/token areas are excluded from recording.
• Customer service and support providers
• Payment processors
• Affiliate and partner program platforms, if an affiliate program is enabled
• Email delivery services
• AI model providers (for AI-powered features)
• Hosting and cloud infrastructure providers

These third parties are contractually obligated to use your information only as necessary to provide services to us and are required to maintain the confidentiality of your information.

4.2 Trading Platforms and Financial Services

To provide our core functionality, we integrate with TradingView and supported broker providers. We may transmit your trading data to and from these platforms as necessary to provide our Service. This data exchange is conducted using secure methods and in accordance with our agreements with these platforms.

4.3 Broker OAuth Integration

When you connect your brokerage account through our OAuth integration, we may access and process the following data:

• Account information and trading history from your connected brokerage account
• Portfolio positions and performance data
• Order history and broker-reported fill information
• Account balance and cash positions

This data is processed solely for the purpose of providing our analytics services. We minimize personal data collection and do not process special-category data. We do not store your broker API credentials and use only temporary access tokens. You can revoke our access to your brokerage account at any time through your broker account settings.

Our broker integrations are subject to applicable third-party API license agreements and privacy policies.

4.4 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your information.

4.5 Legal Requirements

We may disclose your information where we believe it is necessary to:

• Comply with applicable laws, regulations, legal processes, or governmental requests
• Enforce our Terms of Service and other agreements
• Protect our rights, privacy, safety, or property, and/or that of our users or others
• Prevent or investigate possible wrongdoing in connection with the Service

4.6 With Your Consent

We may share your information with third parties when you have given us your consent to do so.

4.7 Large-Language-Model Providers (AI Sub-Processors)

To deliver AI features — including chat assistance, code suggestions, the Algo Agent, and the autonomous research loop in the AI Backtesting Lab — we transmit AI Feature Data (Section 2.4) to third-party large-language-model ("LLM") providers acting as our sub-processors. We currently route AI traffic to one or more of the following providers depending on the feature, the model you select, and operational availability:

• OpenAI, L.L.C. (United States) — GPT-family models, including their Responses and Agents APIs and prompt-cache infrastructure
• Anthropic PBC (United States) — Claude-family models

When you trigger an AI feature, the following data may leave our infrastructure and be processed by the selected LLM provider on its servers:

• The prompt and conversation history for your AI session
• Your Pine Script source and any files or attachments you share in chat
• Case Study state passed to the agent each turn (strategy code, trial summaries, mission state, research lessons)
• Backtest tool output the agent uses to reason (metrics, trade samples, equity-curve summaries)
• Usage metadata necessary for the provider to bill us and operate the model

We use the LLM providers' standard API tiers and, where the provider offers them, the enterprise / zero-retention / no-training defaults applicable to API customers. Subject to the providers' current terms, your prompts and completions are not used to train their foundation models. Providers may retain content for a limited operational window for abuse monitoring; refer to each provider's privacy policy and data-usage terms for the current retention period and the controls available. The current list of LLM sub-processors and a pointer to each provider's data-handling commitments are available on request.

We do not transmit broker credentials, broker API keys, account numbers, individual fills, or live portfolio balances to LLM providers as part of normal AI feature operation.

4.8 Affiliate and Partner Program Providers

If we operate an affiliate or partner program, we may share limited attribution and conversion data with an affiliate platform or approved partner operations provider. Shared data is limited to what is necessary to attribute referrals, validate commission eligibility, manage payout review, and reconcile refunds or chargebacks. We do not share broker credentials, trading account numbers, individual fills, or live portfolio balances with affiliate partners.