Privacy Policy

We may collect the following categories of information:

• Account and identity data, such as email address, authentication identifiers, and login provider details.
• Profile and planning data you submit, such as filing status, state, income inputs, ticker lists, allocations, and strategy parameters.
• Service usage and device data, such as IP address, browser type, pages/tools accessed, timestamps, and error logs.
• Transaction and billing metadata if paid plans are offered (payment card data is handled by payment processors, not stored in full by us).
• Communications data when you contact support or submit feedback.

We collect information:

• Directly from you.
• Automatically through your use of the Service and security logging.
• From identity and infrastructure providers used to operate the Service.

We use personal information to:

• Operate, maintain, and secure the Service.
• Authenticate users and manage accounts.
• Process and return your requested analytics and model outputs.
• Provide customer support and service communications.
• Detect abuse, enforce Terms, and prevent fraud or security incidents.
• Comply with legal obligations and resolve disputes.

Where required, we process personal data under one or more of these legal bases: performance of a contract, legitimate interests (such as security and product improvement), legal obligations, and consent where applicable.

We may share information with:

• Service providers that host or support the Service, such as authentication, cloud infrastructure, database, and operational tooling providers.
• Data and integration providers needed to fulfill requested analytics and market data operations.
• Professional advisers, auditors, insurers, and legal authorities where necessary.
• A successor entity in connection with a merger, acquisition, financing, or asset sale.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising.

We use cookies and browser storage (including localStorage) for session management, authentication, security, and user experience. Third-party providers may also use cookies or similar technologies according to their own policies.

We retain personal information only for as long as needed for the purposes described in this Policy, including account operation, security, legal compliance, and dispute resolution.

Retention periods vary by data type, account status, and legal requirements. We may retain de-identified or aggregated information for analytics and product improvement.

We implement administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

Depending on your jurisdiction, you may have rights to:

• Access, correct, or delete personal information.
• Request portability of personal information.
• Object to or restrict certain processing.
• Withdraw consent where processing relies on consent.
• Appeal a denial of a rights request, where such rights are provided by law.

To exercise rights, contact privacy@arthapilot.com. We may need to verify your identity before processing certain requests.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. Updates are effective when posted. Continued use of the Service after updates means you accept the revised Policy.

Privacy questions or rights requests can be sent to privacy@arthapilot.com.