Privacy Policy

This Privacy Policy describes how Honeypotz Inc. (“Honeypotz,” “we,” “us,” or “our”), located at 8th The Green STE R, Dover, DE 19901, collects, uses, and safeguards information in connection with the AI-QUANT quantitative trading platform (“the Platform”).

1. Information We Collect

Given the institutional nature of our Platform, the majority of data we process is enterprise-grade trading and configuration data. We collect:

1.1 Account & Contact Information

• Name, email address, phone number, and company affiliation of authorized users;
• Billing and invoicing information for institutional accounts;
• Correspondence and support requests submitted via email or in-platform channels.

1.2 Trading Configuration & Operational Data

• Broker API integration credentials (OAuth tokens, API keys) encrypted at rest;
• Engine instance parameters: hedging rules, position limits, strategy configurations;
• Order routing logs and execution metadata (timestamps, fill prices, venue identifiers);
• Risk management thresholds and alerting preferences.

1.3 Platform Usage & Telemetry

• Dashboard session metadata: connection timestamps, WebSocket heartbeat statistics;
• Mobile app diagnostic data: OS version, crash logs, push notification delivery status;
• Feature usage metrics to prioritize development and support resources.

1.4 We Do NOT Collect

• Individual investor PII beyond authorized user contact information;
• End-client data from your broker accounts — we never access your customer records;
• Browser tracking cookies for advertising or cross-site profiling. We use only essential session cookies;
• Location data beyond what is necessary for regulatory compliance (jurisdiction verification).

2. How We Use Information

All data collected is used exclusively for Platform operation, security, and improvement:

• Platform Delivery — executing trades, routing orders, calculating risk metrics, and delivering real-time dashboard updates;
• Authentication & Security — verifying user identity, enforcing biometric access controls on mobile devices, detecting unauthorized access attempts;
• Support & Troubleshooting — diagnosing engine connectivity issues, order routing anomalies, and configuration drift;
• Billing & Account Management — processing institutional invoices and maintaining account records;
• Product Improvement — aggregated, anonymized usage patterns to inform feature development and performance optimization.

We do not sell, rent, or share your data with third parties for marketing, advertising, or data-broker purposes.

3. Data Storage & Security

• Encryption: All data in transit uses TLS 1.3. Data at rest (credentials, strategy configurations) is encrypted using AES-256-GCM;
• On-Premises Option: Customers deploying the Platform on their own infrastructure retain full physical control over their data. No telemetry leaves their network unless explicitly configured;
• Cloud Deployments: For customers using our managed cloud instances, data resides in AWS/GCP/Azure regions of the customer’s choice, with SOC 2-compliant infrastructure;
• Access Controls: Internal access to production data is limited to essential operations personnel and requires multi-factor authentication, audit logging, and just-in-time privilege escalation;
• Incident Response: In the event of a data breach, affected customers are notified within 72 hours with a detailed impact assessment and remediation plan.

4. Data Retention

• Account Information: Retained for the duration of the institutional relationship plus seven (7) years for regulatory and audit purposes;
• Trading Logs: Retained per your configured retention policy (default: 7 years) to support regulatory examinations and trade reconstruction;
• Telemetry & Diagnostics: Retained for 90 days, then permanently deleted;
• Upon Termination: Within 30 days of account closure, all non-regulatory-required data is securely deleted. Customers may request a one-time export of their configuration and log data before deletion.

5. Third-Party Services

The Platform integrates with the following categories of third-party services. Each integration is governed by the third party’s own privacy and security policies:

• Broker APIs (e.g., Schwab OAuth 2.0) — for order execution and market data;
• Cloud Infrastructure Providers (AWS, GCP, Azure) — for managed deployments;
• Push Notification Services (Apple APNs, Firebase Cloud Messaging) — for mobile trade alerts;
• Vercel & Cloudflare — for static asset delivery of landing pages and OTA install manifests. No trading data passes through these services.

6. Your Rights & Choices

Depending on your jurisdiction, you may have rights under applicable data protection laws (GDPR, CCPA, etc.):

• Access & Portability: Request a copy of your data in a machine-readable format;
• Correction: Update inaccurate or incomplete information;
• Deletion: Request deletion of data not subject to regulatory retention requirements;
• Restriction: Limit processing under certain circumstances;
• Objection: Object to processing based on legitimate interests.

To exercise these rights, contact us at aiquant@honeypotz.net. We will respond within 30 days and may require identity verification for security purposes.

7. International Data Transfers

For customers outside the United States, data may be transferred to and processed in the U.S. or other jurisdictions where we or our infrastructure providers operate. We ensure appropriate safeguards (Standard Contractual Clauses, Data Processing Agreements) are in place for cross-border transfers.

8. Children’s Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes are communicated via email and in-platform notice at least 30 days before taking effect. The “Last Updated” date at the top of this page reflects the most recent revision.

10. Contact Us

For privacy-related inquiries, data subject requests, or security concerns:

Honeypotz Inc.
Attn: Data Protection
8th The Green STE R
Dover, DE 19901
aiquant@honeypotz.net
+1 (203) 273-2101