Privacy Policy

Last updated: April 14, 2026

Edgebook.AI ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the rights you have with respect to your information. By using the Edgebook.AI service (the "Service"), you consent to the practices described here.

1. Information We Collect

1.1 Information You Provide

  • Account information: Name, email address, and authentication data managed through our identity provider (Clerk).
  • Billing information: Payment details, billing address, and subscription status. Full card numbers are never stored on our servers — they are handled and stored by Stripe, our PCI-compliant payment processor.
  • Kalshi API credentials: If you choose to connect a Kalshi account, we store an encrypted copy of your API key and key ID so the Service can place trades and fetch positions on your behalf. Credentials are encrypted at rest.
  • Communications: Messages, support requests, and feedback you send us.

1.2 Information Collected Automatically

  • Usage data: Pages viewed, features used, signals approved or rejected, and trades executed through the Service.
  • Device and log data: IP address, browser type, operating system, access times, referring URLs, and error logs.
  • Cookies and similar technologies: Authentication cookies from Clerk, and session cookies used to maintain your logged-in state. We do not currently use third-party advertising or analytics trackers.

1.3 Information From Third Parties

  • Kalshi: When connected, we fetch your positions, balance, and trade execution status via the Kalshi public API.
  • Stripe: We receive subscription status and billing events.
  • Clerk: We receive authentication events (sign-in, sign-up, password change).

2. How We Use Information

  • To provide, operate, and maintain the Service;
  • To authenticate your account and secure your sessions;
  • To execute trades through Kalshi when you approve a signal;
  • To process subscription payments and send billing receipts;
  • To compute portfolio analytics, P&L, and performance metrics;
  • To send service-related communications (e.g., transactional emails, security alerts);
  • To respond to support inquiries;
  • To detect, investigate, and prevent fraud, abuse, and security incidents;
  • To comply with legal obligations.

3. Legal Basis for Processing (EU/UK Users)

If you are located in the EU or UK, we process your personal data on the following legal bases: (a) performance of a contract (to provide the Service), (b) legitimate interests (to secure and improve the Service), (c) compliance with legal obligations, and (d) your consent where applicable.

4. Sharing of Information

We share your information only as follows:

  • Service providers: With vendors that help us operate the Service, including Clerk (authentication), Stripe (payments), Supabase (database hosting), Vercel (application hosting), and Kalshi (trade execution). Each provider is contractually bound to protect your information.
  • Legal compliance: When required by law, subpoena, court order, or other legal process, or to protect our rights, property, or safety, or that of others.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

We do not sell your personal information. We do not share your data with advertisers or data brokers.

5. Data Security

We implement industry-standard technical and organizational measures to protect your information, including TLS encryption in transit, AES-256 encryption at rest for sensitive credentials, access controls, and audit logging. However, no system can guarantee absolute security, and you use the Service at your own risk.

6. Data Retention

We retain your information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or anonymize your personal information within 30 days, except where retention is required by law (e.g., tax, anti-money laundering) or to resolve disputes and enforce our agreements.

7. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your personal information;
  • Restrict or object to processing;
  • Receive your information in a portable format;
  • Withdraw consent where processing is based on consent;
  • Lodge a complaint with a data protection authority.

California residents have additional rights under the CCPA/CPRA, including the right to opt out of the "sale" or "sharing" of personal information (note: we do not sell or share personal information as defined by those statutes).

To exercise any of these rights, email privacy@edgebook.live from the address associated with your account.

8. Children's Privacy

The Service is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

9. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S., where data protection laws may differ from those of your country. By using the Service you consent to such transfers.

10. Cookies

We use essential cookies for authentication and session management. You may block cookies through your browser settings, but doing so may prevent the Service from functioning properly. We do not currently use advertising or cross-site tracking cookies.

11. Changes to this Privacy Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email or in-app notice. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

For privacy questions or requests, contact: privacy@edgebook.live