Privacy Policy

The Bit Better Company of Manhattan LLC ("Company", "we", "our", or "us") operates Trade The Cycle at tradethecycle.com. We respect your privacy and are committed to protecting it. This policy describes how we collect, process, retain, and disclose personal data about you when you use our website, its API and AI connections, and the emails it sends (together, our "Services"), and our practices for using, maintaining, protecting, and disclosing that information.

This policy applies only to information we collect:

• Through the Services.
• In communications between you and the Services, including email and support messages.

It does not apply to information collected by us through any other means, including any other website we operate that does not link to this policy, or by any third party, including through any application or content that may link to or be accessible from the Services.

Please read this policy carefully. By using the Services or providing us with your information, you agree to the collection, use, and sharing of your information as described here. This policy may change from time to time, and your continued use of the Services after we make changes is deemed acceptance of those changes, so please check it periodically.

Our Services are not intended for, and we do not knowingly collect any personal data from, anyone under the age of 18. If we learn we have collected or received personal data from someone under 18, we will delete that information.

"Personal data" is information that identifies, relates to, or describes you, directly or indirectly, as an individual. We keep what we collect deliberately small. The types of personal data we collect or process are:

• Account information. Your email address, which is the only account field we ask for. Sign-in is passwordless, by emailed link or passkey. We never ask for a username or a password.
• Passkeys. If you register a passkey, we store its public credential. Any fingerprint or face check happens on your own device and is never sent to us.
• Subscription and payment history. Your plan, its price and billing interval, its status, renewal and cancellation dates, and the identifier and email address our payment processor holds for you. When you subscribe, you enter your name, billing address, and card details directly with our payment processor, Stripe, which uses your address to calculate sales tax. Card details never reach our servers.
• Alerts and preferences. The alert conditions you create, any optional goals you enter, whether you want alert emails, and display preferences.
• API and connected app information. If you create API keys or connect an AI assistant, we store a one-way hash of each key (never the key itself), the name of each connected app, when it was created, last used, or revoked, and usage counts used for rate limiting.
• Communications. The content of support messages you send us and our replies.
• Device and usage information. Your IP address, browser type and settings, operating system, referring page, and how you interact with the Services, collected as described below.

We also collect:

• Statistical or aggregated information. Aggregated data does not directly identify a specific person. For example, we may count how many visitors viewed a chart page.
• Technical information. Information about your connection and your interactions with the Services, such as the date and time of a visit, pages viewed, page response times, errors, and page interactions such as scrolling and clicks.

If we combine non-personal statistical or technical data with personal data so that it identifies an individual, we treat the combined information as personal data.

We do not collect sensitive personal data such as government identifiers, precise location, or biometric data, and we never receive your full card number.

You provide information to us when you sign in, subscribe, create or change alerts and goals, create API keys, connect an AI assistant, change your email address, or contact support.

We also collect information automatically as you use the Services. The technologies we use are:

• Essential cookies. Small files that keep you signed in and remember your settings. The Services do not work signed in without them.
• Product analytics. We use Umami, which we host ourselves, to count page views and actions such as starting a checkout. It does not set cookies and reports in aggregate.
• Session insight. We use Microsoft Clarity to understand how the site is used and where it is confusing. Clarity sets cookies and records interactions such as clicks, scrolling, and mouse movement, which can be replayed as a session. Microsoft processes this data under its own privacy statement.
• Server logs. Our hosting provider records requests to the Services, including IP address and browser information, for security and reliability.

You may refuse or disable cookies in your browser settings. If you do, signing in and some features of the Services will not work.

We also receive information from service providers we engage, such as subscription and payment status from our payment processor.

We use information we collect about you or that you provide to us, including personal data, to:

• Provide the Services and their content and features, including signing you in.
• Manage your subscription and payments.
• Grade your alerts and email you when one fires, if you have asked us to.
• Send notices about your account and subscription, including renewal, cancellation, and sign-in emails.
• Answer support requests.
• Improve the Services, including by analyzing how they are used, in aggregate and through session insight.
• Keep the Services secure, including rate limiting and preventing abuse.
• Carry out our obligations and enforce our rights arising from any agreement between you and us, including billing.
• Notify you about changes to the Services.
• Fulfill any other purpose for which you provide it, or for any other purpose with your consent.

We do not use your personal data for targeted advertising, and we do not collect, use, or sell personal data to train large language models.

We do not sell your personal data. We may disclose aggregated information that does not identify any individual without restriction. We may disclose personal data:

• To service providers that run the Services on our behalf and only for that purpose: Supabase (database and authentication), Stripe (payments and subscription management), Resend (email delivery), Vercel (hosting), and Microsoft (Clarity session insight).
• To AI assistants you connect, which can read your data and act on your alerts through our API only after you authorize them, and until you revoke them.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company's assets, in which personal data held by us is among the assets transferred.
• To fulfill the purpose for which you provide it, for any other purpose we disclose when you provide it, or with your consent.

We may also disclose your personal data:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our Terms of Service and other agreements with you, including for billing and collection.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others.

The categories of personal data we may disclose are account information, subscription and payment history, alerts and preferences, API and connected app information, communications, and device and usage information.

• Cookies and tracking. You can set your browser to refuse cookies or alert you when they are sent. To opt out of Microsoft Clarity session insight, block cookies from clarity.ms in your browser, or email support@tradethecycle.com. Because there is no common understanding of how to interpret browser Do Not Track signals, the Services do not respond to them; we do honor Global Privacy Control as described below.
• Alert emails. You can turn alert emails off in your alert settings or with the unsubscribe link in any alert email. Your alerts keep running on the site.
• Your email address. You can change the email address on your account at any time from your account page.
• API keys and connected apps. You can revoke any API key or connected AI assistant at any time from the API & AI Access page.
• Deleting your account. You can delete your account at any time from your account page. Deleting it cancels any active subscription first.

Depending on your state of residence, you may have certain rights related to your personal data, including:

• Access and data portability. You may confirm whether we process your personal data and obtain a copy of it, in a portable format where feasible.
• Correction. You may ask us to correct inaccuracies in your personal data.
• Deletion. You may ask us to delete personal data we maintain about you, subject to exceptions under applicable law.
• Opt out. You may opt out of the sale of your personal data, its use for targeted advertising, and profiling in furtherance of decisions with legal or similarly significant effects. We do not sell personal data or use it for targeted advertising or such profiling.

The exact scope of these rights varies by state, and there are exceptions where we may not be obligated to fulfill a request.

To exercise any of these rights, email support@tradethecycle.com from the address on your account, so we can verify the request is yours. We will complete your request within 30 days, and we will not charge you or make the Services worse for you because you made it. To appeal a decision about your request, reply to our decision email with "Appeal" in the subject line, and we will respond within the time required by your state's law.

Some browsers and extensions support Global Privacy Control ("GPC"), which signals a request to opt out of certain processing, including data "sales" as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect it as required by applicable law.

Nevada residents have a limited right to opt out of certain sales of personal data. We do not sell personal data that triggers that statute.

We use commercially reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. Sign-in is passwordless, API keys are stored only as hashes, and payment details are held by our payment processor rather than by us. Data is encrypted in transit and at rest by our providers, and access to production data is limited to the founder.

However, no website, system, or online service is completely secure, and we cannot guarantee the security of your personal data. Email in particular may not be secure, so please think carefully about what you send us. Any transmission of personal data is at your own risk. The security of your information also depends on you, including keeping access to your email account safe.

We keep personal data for as long as reasonably necessary to provide the Services and for the purposes described in this policy, or as otherwise legally permitted or required, such as for complying with our legal obligations, resolving disputes, and for security and fraud prevention.

When you delete your account, we delete your account, alerts, goals, preferences, API keys, and connected app records. Our payment processor retains transaction records as tax and accounting law requires, and support emails may remain in our mailbox. Server logs and analytics are kept for limited periods and then deleted or deidentified.

We may update this policy from time to time and will provide notice of changes as required by law. The date the policy was last updated is shown at the top of this page. We will post the updated policy here and update that date. If a change is material, we will also tell you by email. You should still check this page periodically for the current policy.

To exercise your rights, or to ask a question or comment about this policy or our privacy practices, contact The Bit Better Company of Manhattan LLC at support@tradethecycle.com.