Privacy Policy

The services below are the third parties that process data on our behalf. Each entry states the personal data involved.

• Registration & authentication — Clerk processes your email, first name, last name, and password. We do not store your password.
• Analytics & performance — Vercel Speed Insights processes anonymized performance metrics (Usage Data).
• Hosting & infrastructure — Vercel (website/app) and Fly.io (market-data gateway) process server logs and IP addresses to serve requests and for security.
• In-app AI assistant (MARA) — Anthropic (Claude) processes the prompts you submit to the assistant together with relevant market context. Prompts sent via the API are not used to train models.
• Customer support chat — Chatbase processes messages you send in the support widget (applies only when enabled).
• Market data — Polygon.io and Massive provide data feeds; these are inbound sources and do not receive your personal information.
• Payments — Stripe processes card data when paid plans are enabled; we do not store full card numbers.
• Affiliate program — Stripe Connect and PayPal process affiliate payout information when the program is enabled.

Fonts are self-hosted via Next.js and served from our own domain — no font data is shared with any third party.

To provide and secure the service, authenticate you, respond to support requests, send updates and alerts you opt into, process payments, and improve the product. We do not sell or share your personal information for cross-context behavioral advertising.

If you provide your mobile number and opt in, you agree to receive text messages from Exposure Tape — such as trade or price alerts and account or service messages — at the number you provide. Consent to marketing texts is not a condition of purchase. Message frequency varies, and message and data rates may apply. You can opt out at any time by replying STOP, or reply HELP for help. We do not sell or share mobile numbers or opt-in data with third parties for their own marketing; we share them only with providers that help us deliver the messages.

We use essential cookies to run the service (authentication, session) and, only with your consent, analytics cookies. You control non-essential cookies through the consent banner. We honor Global Privacy Control (GPC) browser signals as a valid opt-out of any “sharing.” California residents can also use Do Not Sell or Share My Personal Information.

We keep account data for as long as your account is active and as needed to comply with legal obligations. Market and usage data are retained on a rolling basis. You can request deletion at any time.

You may have the right to access, correct, delete, export, or restrict processing of your personal information, and to withdraw consent. You can delete your account directly from account settings, or email us to exercise any right.

This section applies to California residents under the California Consumer Privacy Act, as amended by the CPRA. We collect the following categories of personal information: identifiers (name, email, IP address, account ID) and internet or network activity (usage data). We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics.

You have the right to know/access, delete, correct, and opt out of sale/sharing, and the right not to be discriminated against for exercising these rights. To exercise them, email privacy@exposuretape.com. We will verify your identity before responding. You may use an authorized agent, and you may submit up to two requests per 12-month period for access/portability. We honor GPC signals.

Although Exposure Tape is directed to US users, if you access it from a jurisdiction covered by the GDPR, we process personal data on the bases of contract, legitimate interests, consent, and legal obligation, and you may have rights of access, rectification, erasure, restriction, portability, and objection. Contact privacy@exposuretape.com.

Exposure Tape is a financial product intended for adults. You must be at least 18 to use the Services, and we do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it.

We will update this policy as the product evolves and post the new date above. Owner and Data Controller: Exposure Tape [ entity to be formed ], [ address ]. Contact: privacy@exposuretape.com.