Privacy policy

1. Information we collect

1.1 Details you give us

When you open an account or use the Service, we may gather the following information:

• Identity information: your first and last name and date of birth.
• Contact information: your email address, telephone number, and residential address.
• Financial information: Broker API keys restricted to reading and execution, investment preferences, and risk settings. We do not retain complete broker login details or payment-card numbers.
• Account profile information: your username, strategy preferences, and notification choices.
• Communications: messages sent through support channels or by email.

1.2 Information gathered automatically

Using the Service also results in the automatic collection of certain technical details:

• IP address, browser name and version, and operating system.
• Visited pages, features accessed, time on site, and clickstream information.
• Device identifiers and mobile advertising identifiers where relevant.
• Information about cookies and tracking tools (see our Cookie Policy).

1.3 Information supplied by third parties

We may obtain information from identity-check providers, fraud-prevention services, analytics partners, and similar third parties. This information may be combined with our records to strengthen accuracy and security.

2. How we use information

The information we collect may be used to:

• Set up and administer your account and deliver the Service.
• Process trading signals and place automated orders through connected brokers.
• Tailor your experience and surface relevant market information.
• Deliver service messages, including confirmations, trading notices, and security alerts.
• Send promotional messages where you have agreed or the law allows it.
• Identify, examine, and prevent fraud or other unauthorised activity.
• Meet legal and regulatory responsibilities.
• Improve, test, and build Service features using aggregated and anonymised information.

3. Processing grounds for EEA and UK users

For people in the European Economic Area or the United Kingdom, we process personal information on the following legal grounds:

• Performance of a contract: to deliver the Service you requested.
• Legitimate interests: fraud prevention, platform security, and product development.
• Legal requirement: meeting financial-regulation and tax obligations.
• Consent: marketing and optional cookies, with consent withdrawable at any time.

4. When information is shared

We do not sell personal information. We may disclose it to:

• Service providers: cloud hosting, email, analytics, and customer-support providers bound by contract to safeguard your information.
• Connected brokers and exchanges: only the API instructions needed to carry out your configured strategy.
• Authorities: where required by law or court order, or where needed to protect our rights.
• Business transfers: during a merger, acquisition, or asset sale, provided the receiving party continues to respect this policy.

5. International transfers

Solara AI operates internationally. Information may be moved to and handled in countries outside your home jurisdiction, including the United States and European Union member states. Where applicable, cross-border transfers are protected through Standard Contractual Clauses approved by the European Commission.

6. Keeping information

We keep personal information while your account remains open or for as long as needed to provide the Service. Following closure, some information may be retained for up to seven years to meet financial regulatory requirements. Aggregated, anonymised analytics may be stored indefinitely.

7. Your rights

Depending on where you live, you may have the right to:

• Obtain a copy of the personal information we hold about you.
• Have incorrect or incomplete information amended.
• Ask us to erase your information (the “right to be forgotten”).
• Object to, or ask us to limit, particular processing activities.
• Receive your information in a structured, machine-readable form.
• Withdraw consent at any point, without changing processing already carried out.

To make a rights request, contact us at [email protected]. We aim to reply within 30 days.

8. Security

Our safeguards include TLS 1.3 for data in transit, AES-256 for stored data, multi-factor authentication, role-based permissions, and yearly independent penetration testing. No online system is entirely risk-free. Use a strong, unique password and switch on two-factor authentication.

9. Cookies

Cookies and related technologies help us run and improve the Service. Full information is available in our Cookie Policy.

10. Privacy for children

The Service is intended for people aged 18 and over. We do not knowingly collect information from minors. If you believe a minor has supplied personal information, tell us and we will remove it promptly.

11. Policy updates

This Privacy Policy may change periodically. Material updates will be announced on our website or sent by email. Continuing to use the Service after an update takes effect means you accept the amended policy.

12. Contact us

For privacy questions or to exercise your rights, contact our Data Protection Officer:

• Email: [email protected]
• Postal address: Solara AI Inc. of 200 Park Avenue, New York, NY 10166, United States, United States
• EU representative: Solara AI, 200 Park Avenue, New York, NY 10166, United States