Privacy Policy

Last updated: March 28, 2026

EdgeBuilderLab (“we”, “us”, “our”) operates the edgebuilderlab.com website and cloud platform. This Privacy Policy explains what personal data we collect, why we collect it, and your rights regarding that data.

1. Data We Collect

Account Data

When you sign up, we receive from Microsoft Entra ID:

• Email address — used as your unique identifier and for account communications
• Display name — shown in the application interface

Billing Data

If you subscribe to a paid plan, Stripe (our payment processor) collects:

• Payment method details (card number, billing address)
• Transaction history

We do not store your payment card details. We only store a Stripe Customer ID and Subscription ID to manage your plan.

Usage Data

We store data you create through the Service:

• Strategy configurations (expert selections, symbols, parameters)
• Training job records (status, metrics, timestamps)
• Trained model files (stored in Azure Blob Storage)

Technical Data

• Server logs (IP address, request timestamps, error messages) — retained for 30 days
• Authentication tokens (stored client-side in your browser as JWTs)

2. What We Do NOT Collect

• No analytics or behavioral tracking (no Google Analytics, no cookies for tracking)
• No brokerage account information
• No trading history or portfolio data
• No location tracking beyond what is in server logs

3. How We Use Your Data

• To provide and operate the Service
• To manage your account and subscription
• To communicate with you about your account (e.g., billing issues)
• To diagnose technical problems via server logs

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

We share limited data with the following service providers:

5. Cookies

We use only essential cookies required for authentication (session tokens). We do not use advertising, analytics, or tracking cookies.

6. Data Retention

• Account data: Retained until you delete your account
• Strategy and model data: Retained until you delete them or your account
• Server logs: Automatically deleted after 30 days
• Stripe data: Managed by Stripe per their retention policy

7. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you have the right to:

• Access — Request a copy of all personal data we hold about you
• Rectification — Request correction of inaccurate data
• Deletion — Request deletion of your account and all associated data
• Portability — Receive your data in a machine-readable format
• Objection — Object to processing of your personal data
• Withdraw consent — Where processing is based on consent, you may withdraw it at any time

California residents (CCPA): We do not sell your personal information. You have the right to know what data we collect, request deletion, and not be discriminated against for exercising your rights.

To exercise any of these rights, contact privacy@edgebuilderlab.com or use the “Delete My Account” option in your account settings. We will respond within 30 days.

8. Data Security

We use industry-standard security measures including encryption in transit (TLS), encryption at rest (Azure Storage encryption), and secrets stored in Azure Key Vault. However, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data is processed and stored in the United States (Azure West US 2 region). If you are accessing the Service from outside the United States, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer.

10. Children's Privacy

The Service is not intended for anyone under 18 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the Service constitutes acceptance.

12. Contact

For privacy questions or data requests, contact: privacy@edgebuilderlab.com