Privacy Policy

Effective Date: March 25, 2026

Exchange Alpha ("we," "us," or "our") operates www.exchangealpha.com (the "Website") and the Exchange Alpha mobile application (the "App"). We respect your privacy and work hard to protect your information. This Privacy Policy explains how we collect, use, and protect your information when you use our Website or App.

1. Information We Collect

1.1 Automatically Collected Information

When you visit our Website, we automatically collect:

  • Device Information: IP address, browser type, operating system, device type
  • Usage Data: Pages viewed, time spent on pages, click data, referring website, session duration
  • Analytics Data: Through Google Analytics (see Section 2 below)
  • Location Data: Approximate geographic location based on IP address

Communication Information: If you contact us, we collect:

  • Email correspondence with our support team
  • Contact form submissions (when available)
  • Feedback and survey responses

1.2 Current Information Collection (Real-Time Data Subscribers)

For our current real-time data subscription services, we collect:

Subscriber Information:

  • Email address
  • Contact information (method of delivery)

Notification Channel Information (Based on Your Choice):

  • Email address (for email alerts)
  • Telegram username or chat ID (for Telegram notifications)
  • Discord webhook URL (for Discord notifications)
  • Slack workspace information (for Slack notifications)

Payment Information:

  • Credit card or debit card information
  • Billing address
  • Payment method details

Important: Payment processing is handled by Stripe, our third-party payment processor. Payment information is transmitted directly to Stripe using secure encryption (TLS 1.2+). We do not store full credit card numbers on our servers. Stripe is PCI-DSS Level 1 compliant and maintains the highest level of payment security certification.

1.3 Mobile App Information Collection

When using our mobile application, we collect:

  • Push notification device tokens (used to deliver alerts to your device via Apple Push Notification service)
  • Account login credentials (email address and encrypted password stored securely)
  • Authentication tokens (stored in your device's Keychain)
  • Account preferences and subscription settings
  • Subscription and purchase history (including Apple In-App Purchase transaction data)
  • Login activity and session information

2. Google Analytics

We use Google Analytics to understand how visitors interact with our Website. Google Analytics collects information such as:

  • How often users visit our Website
  • What pages they visit
  • What other sites they used prior to visiting our Website

Google Analytics collects only the IP address assigned to you on the date you visit our Website, not your name or other identifying information. We do not combine the information collected through Google Analytics with personally identifiable information.

For more information on Google Analytics' privacy practices, visit: https://policies.google.com/privacy

Opt-Out: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

3. How We Use Your Information

We use collected information to:

  • Account Management: Create and maintain user accounts, authenticate users, manage login credentials
  • Provide Services: Process subscriptions, grant access to real-time data
  • Send Notifications: Deliver market alerts, price notifications, and updates via push notifications, email, and other chosen channels
  • Process Payments: Handle billing and process transactions through Stripe and Apple In-App Purchase
  • Customer Support: Respond to inquiries, provide technical support, resolve issues
  • Improve Services: Analyze how visitors use our Website and app to improve user experience
  • Monitor Usage: Track usage patterns and trends, prevent abuse
  • Security: Detect and prevent technical issues, fraud, and unauthorized access
  • Legal Compliance: Comply with legal obligations, enforce our Terms of Service
  • Communications: Send service updates, subscription confirmations, payment receipts, password reset codes, and important notices
  • Marketing: Send promotional materials about our services (only with your consent; you can opt out anytime)

4. Cookies

We use cookies and similar tracking technologies to improve your experience. Cookies are small data files stored on your device.

Types of Cookies We Use:

  • Essential Cookies: Required for the Website to function properly
  • Analytics Cookies: Help us understand how visitors interact with our Website (Google Analytics)

You can control cookies through your browser settings. Note that disabling cookies may affect your ability to use certain features of our Website.

For more information, see our Cookies Policy.

5. Third-Party Services

We use various third-party services to provide and enhance our platform.

5.1 Market Data Providers

Our Website displays market data from third-party providers, including:

  • Binance: Cryptocurrency market data
  • Kalshi: Prediction market data
  • Polymarket: Prediction market data

We do not share your personal information with these data providers. When you interact with data from these providers on our Website, you may be subject to their respective privacy policies.

5.2 Payment Processing

We use Stripe and Apple In-App Purchase to process payment transactions.

Stripe (Website Subscriptions)

Payment Processor Security:

  • Your payment information is transmitted directly to Stripe
  • We do NOT store your full credit card numbers on our servers
  • Stripe is PCI-DSS Level 1 compliant (the highest level of security certification)
  • All payment data is encrypted during transmission using TLS 1.2+
  • Stripe handles all sensitive payment data on secure servers

Stripe's Privacy Policy: https://stripe.com/privacy

Information Shared with Stripe:

  • Billing name and address
  • Email address
  • Payment method details (transmitted directly to Stripe)
  • Transaction amount and subscription details
  • IP address and device information (for fraud prevention)

We receive confirmation of successful payments from Stripe but never receive or store your full credit card numbers.

Apple In-App Purchase (Mobile App Subscriptions)

Subscriptions purchased through our iOS app are processed by Apple through the App Store. Payment is charged to your Apple ID account.

Information We Receive from Apple:

  • Transaction verification data (to confirm valid purchases)
  • Product identifier (which feed you subscribed to)
  • Transaction status (active, expired, or cancelled)

Information We Do NOT Receive from Apple:

  • Your credit card or payment method details
  • Your Apple ID password
  • Your full Apple account information

All payment processing for in-app purchases is handled entirely by Apple. For information on how Apple handles your payment data, see Apple's Privacy Policy: https://www.apple.com/legal/privacy/

5.3 Notification and Communication Services

We use various third-party services to send you market alerts, price notifications, and important updates.

Push Notifications (Apple Push Notification service)

Service Provider: Apple Inc.

What We Send:

  • Real-time market alerts
  • Earnings, macroeconomic, IPO, and news notifications
  • Account and subscription notifications

How It Works:

  • When you grant notification permission, your device generates a unique device token
  • We store this token on our server and use it to send push notifications through Apple's servers
  • Notifications are delivered even when the app is not open

Your Control:

  • You can disable push notifications at any time in your device's Settings
  • Revoking notification permission stops all push alerts immediately
  • You can manage which alert feeds you receive through your subscription settings

Privacy: Subject to Apple's privacy policy: https://www.apple.com/legal/privacy/

Information Shared with Apple:

  • Device token (a unique identifier for your device, not linked to your Apple ID by us)
  • Notification content (alert message, title)

Email Notifications (Resend)

Service Provider: Resend, Inc.

What We Send:

  • Market analysis and reports
  • Price alerts and notifications
  • Subscription updates and receipts
  • Service updates
  • Marketing communications (with your consent)

CAN-SPAM Compliance: All marketing emails include:

  • Clear identification when the message is an advertisement
  • Our physical mailing address
  • Clear and conspicuous unsubscribe link
  • Processing of opt-out requests within 10 business days

Your Rights:

  • Unsubscribe from marketing emails at any time via the unsubscribe link
  • Continue to receive transactional emails (receipts, service updates) even if you unsubscribe from marketing

Privacy: Resend's privacy policy: https://resend.com/legal/privacy-policy

Telegram Notifications

Service Provider: Telegram Bot API (Free Service)

What We Send:

  • Real-time market alerts
  • Price notifications
  • Prediction market updates

How It Works:

  • You provide your Telegram username or chat ID
  • You start a conversation with our Telegram bot
  • We send notifications directly to your Telegram app

Your Control:

  • Block or mute our bot at any time
  • No phone number shared with us (we only use Telegram username)

Privacy: Subject to Telegram's privacy policy: https://telegram.org/privacy

Discord Notifications

Service Provider: Discord Webhooks (Free Service)

What We Send:

  • Market alerts to your Discord server
  • Price notifications
  • Prediction market updates

How It Works:

  • You provide a Discord webhook URL from your server
  • We send notifications to your Discord channel
  • You control who sees these notifications in your Discord server

Your Control:

  • Delete or disable the webhook at any time in Discord

Privacy: Subject to Discord's privacy policy: https://discord.com/privacy

Slack Notifications

Service Provider: Slack API/Webhooks (Free Service)

What We Send:

  • Market alerts to your Slack workspace
  • Price notifications
  • Team updates and reports

How It Works:

  • You authorize our Slack app or provide a webhook URL
  • We send notifications to your Slack channel
  • You control permissions and visibility in Slack

Your Control:

  • Revoke app access at any time in Slack settings
  • Remove webhooks from your workspace

Privacy: Subject to Slack's privacy policy: https://slack.com/privacy-policy

Information Shared with Notification Services

Resend (Email):

  • Email address
  • Name
  • Message content
  • Open and click tracking data (if enabled)
  • Unsubscribe status

Telegram:

  • Telegram username or chat ID
  • Message content

Discord:

  • Webhook URL
  • Message content

Slack:

  • Workspace/channel information
  • Message content
  • User authorization tokens (if using OAuth)

Important: These services process data on our behalf. They are prohibited from using your information for their own purposes beyond providing the notification services.

6. Data Security

We implement appropriate technical and organizational measures to protect your information. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

Our Website is not directed to individuals under the age of 18. You must be 18 years or older to subscribe to our services.

We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at zach@exchangealpha.com, and we will delete such information from our systems.

8. Your Rights

Depending on your location, you may have certain rights regarding your information:

8.1 General Rights (All Users)

Right to Access: Request a copy of the personal information we hold about you

Right to Correction: Request correction of inaccurate or incomplete information

Right to Deletion: Request deletion of your personal information (subject to legal obligations)

Right to Data Portability: Request your data in a portable format

Right to Opt-Out: Unsubscribe from communications at any time

8.2 California Residents (CCPA)

If you are a California resident, you have additional rights:

  • Right to know what personal information we collect, use, and disclose
  • Right to request deletion of personal information
  • Right to opt-out of sale of personal information (Note: We do not sell personal information)
  • Right to non-discrimination for exercising your rights

Shine the Light Law: California residents may request information about our disclosure of personal information to third parties for direct marketing purposes.

8.3 EEA/UK Residents (GDPR)

If you are in the European Economic Area or United Kingdom:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

8.4 How to Exercise Your Rights

To exercise these rights, please contact us at: zach@exchangealpha.com

Please include:

  • Your full name
  • Email address used for your account or subscription
  • Specific request (e.g., "delete my data," "access my data")
  • Proof of identity (for security purposes)

We will respond to your request within:

  • 30 days for CCPA requests
  • 30 days (extendable to 60 days) for GDPR requests
  • Reasonable timeframe for other requests

9. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

Current Data Retention:

  • Analytics Data: Retained according to Google Analytics settings (typically 26 months)
  • Communication Records: Retained for customer service purposes (typically 3 years)
  • Payment Information: Transaction records retained for 7 years for tax and accounting purposes (credit card information NOT stored by us - handled by Stripe)
  • Notification Contact Information: Retained while notifications are enabled and subscription is active
  • Notification Delivery Logs: Retained for 30 days for troubleshooting
  • Opt-Out Preferences: Retained permanently to honor your choices

Account Data Retention:

  • Account Information: Retained while accounts are active and for a reasonable period after closure
  • Account Deletion: When you delete your account, your personal information, device tokens, and subscription data are deleted immediately. Transaction records may be retained for legal and tax compliance. Anonymized usage data may be retained for analytics.

Legal Holds: If we receive a legal request to preserve data, we will retain relevant information as required by law.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" above. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: zach@exchangealpha.com
Website: www.exchangealpha.com

Last Updated: March 25, 2026