PRIVACY POLICY

EarthExchange — Effective April 2026

This Privacy Policy describes how EarthExchange ("we", "us", "our") collects, uses, and protects your information when you use our automated trading software platform at earthexchange.app.

1. INFORMATION WE COLLECT

Account Information: When you register, we collect your name, email address, and a hashed (encrypted) password. We never store your password in plain text.

API Credentials: If you connect a brokerage account, we store your Alpaca API key and secret key in our database to execute trades on your behalf. These credentials are used only to communicate with Alpaca's API on your behalf.

Trading Data: We log trades executed by your bot including symbol, quantity, price, and timestamp for display in your dashboard and results page.

Usage Data: We log your last login time and bot activity for security and operational purposes.

Payment Information: We do not store payment information. All billing is handled by PayPal. We only receive a subscription ID to confirm your subscription status.

2. HOW WE USE YOUR INFORMATION

  • To operate your trading bot and execute trades on your behalf
  • To send you email verification, trade alerts, and service notifications
  • To display your trading history and performance in your dashboard
  • To maintain your account and subscription status
  • To improve and troubleshoot the platform

3. INFORMATION SHARING

We do not sell, rent, or share your personal information with third parties except:

  • Alpaca Securities LLC — your API credentials are transmitted to Alpaca's API to place trades. Alpaca's privacy policy governs their use of your data.
  • PayPal — payment processing. PayPal's privacy policy governs their use of your payment data.
  • Legal requirements — we may disclose information if required by law or to protect our legal rights.

4. DATA SECURITY

We take reasonable measures to protect your information including encrypted password storage and HTTPS encryption for all data in transit. However, no method of transmission over the internet is 100% secure. You are responsible for maintaining the security of your account credentials.

Important: We strongly recommend using Alpaca API keys with trading permissions only (not withdrawal permissions) to limit risk in the event of unauthorized access.

5. DATA RETENTION

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or operational purposes.

6. YOUR RIGHTS

You may request access to, correction of, or deletion of your personal data by contacting us at [email protected]. You may also cancel your subscription at any time through PayPal.

7. COOKIES

We use a single session cookie to keep you logged in. We do not use tracking cookies or third-party analytics cookies.

8. CHILDREN

EarthExchange is not directed at persons under 18 years of age. We do not knowingly collect personal information from minors.

9. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. Your continued use of the Service after changes take effect constitutes acceptance.

10. CONTACT

For privacy-related questions or requests: [email protected]