TRAVIDENCE — PRIVACY POLICY

This Privacy Policy describes how Travidence, LLC, a Delaware limited liability company with a mailing address at 800 N King Street, Suite 304-3527, Wilmington, Delaware 19801, United States (“Travidence,” “we,” “our,” or “us”), collects, uses, shares, and retains information in connection with the TRAVIDENCE websites, platform, and strategy-validation services (the “Service”). This Policy is incorporated into, and uses terms defined in, our Terms of Service.

The Service is available only to individuals 18 or older and is not offered to, or directed at, residents of the European Economic Area, the United Kingdom, or Switzerland.

1. Information We Collect

(a) Account information. Your email address, your name if you provide it, and the authentication identifiers used to sign you in (for example, Google sign-in identifiers or passkey credentials). We do not receive or store your Google account password.

(b) Payment information. Payments are processed by our third-party payment processor, Stripe. We receive transaction metadata (such as amount, date, and payment status); we do not store full card numbers or security codes.

(c) Trading data you submit. The files you upload (trade histories and backtest exports) and the intake information you provide about each submission (for example, nominal capital and the number of variants tested).

(d) Broker credentials and retrieved records. If you connect a supported trading venue, the read-only API credentials you provide and the trade records retrieved with them.

(e) Technical and usage data. Standard technical logs (such as IP address, browser type, and timestamps) used for security, abuse prevention, and operations. The Service uses strictly necessary cookies and similar local-storage technologies for authentication, security, and core functionality. We do not use advertising cookies.

2. How We Use Information

We use the information described above to: provide the Service, including running the analysis, generating your results and certificates, and maintaining your validation history; operate the public certificate verifier, which displays only limited, non-personal fields; process payments and prevent fraud and abuse; send transactional notifications (for example, that a result is ready — result contents are never included in the email body); respond to support requests; and comply with legal obligations and enforce our Terms of Service. We may generate aggregated, de-identified operational statistics (for example, submission volumes and error rates) that do not identify you and do not reveal your submitted content.

3. Automated Analysis

The Robustness Score, verdict band, and certificate are produced by an automated, deterministic statistical engine applied to the data you submit. The outputs are informational decision-support about the submitted trading history; they do not produce legal effects concerning you, and we do not use your information for advertising or behavioral profiling. If you have questions about a result, you can always reach a person at [email protected].

4. How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only: (a) with service providers that process it on our behalf under contractual safeguards — currently including Stripe (payment processing), Supabase (authentication and database infrastructure), Render (application hosting), Cloudflare (content delivery and security), Google Workspace (business email), and Postmark (transactional email); (b) where required to comply with law, legal process, or enforceable governmental requests, or to protect rights, safety, and the integrity of the Service; (c) in connection with a merger, reorganization, or transfer of the Service, including to an affiliate, in which case this Policy will continue to apply to your information; and (d) at your direction.

5. Broker Credentials

Venue credentials are requested with read-only scope, are used solely to retrieve your trade history for analysis, and are stored encrypted at rest. We never ask for your venue login password. You may delete stored credentials at any time from your account, and they are deleted immediately when you delete your account. Retrieval of records from a venue occurs only when you initiate it.

6. Data Retention

We keep information only as long as needed for the purposes described in this Policy, with the following specific periods:

(a) Certificates and the verification registry. Retained for at least seven (7) years from issuance, in line with audit-documentation retention standards, and retained after account deletion in order to preserve the integrity of the public certificate record. The public verifier displays only limited, non-personal fields.

(b) Submitted trading data and results. Retained for the same seven (7)-year period as the evidentiary record supporting issued certificates and their reproducibility hashes.

(c) Broker credentials. Retained until you delete them or delete your account, whichever comes first. There is no retention tail for credentials.

(d) Account information. Retained while your account is active and deleted upon verified request, subject to the exceptions in this Section.

(e) Billing and transaction records. Retained for seven (7) years to meet tax and accounting obligations.

7. Account Deletion

You may request deletion of your account at any time from your account page or by writing to [email protected]. Upon a verified deletion request, we delete your personal information, except: the certificate registry and its supporting evidentiary record (Sections 6(a) and 6(b)); billing and transaction records (Section 6(e)); and limited records reasonably necessary to prevent fraud, resolve disputes, or comply with law. We state these exceptions here so that they are never a surprise.

8. Your Privacy Rights

Regardless of where you live, you may request access to, correction of, a portable copy of, or deletion of your personal information (subject to Section 6) by writing to [email protected]. We will verify your identity before acting on a request and will respond within a reasonable time. We will not discriminate against you for exercising these rights. Residents of certain U.S. states may have additional statutory rights under state privacy laws; we extend the rights described above to all users voluntarily.

9. Security

We use industry-standard safeguards, including encryption in transit (TLS), encryption at rest, hardened access controls, and multi-factor authentication on our administrative systems. No method of transmission or storage is completely secure; we cannot guarantee absolute security, and we will respond to any incident in accordance with applicable law.

10. International Processing

We are a United States company. Your information is processed and stored in the United States and may be accessed from other countries where our personnel operate. By using the Service, you understand that your information will be processed in the United States.

11. Children

The Service is not directed to, and may not be used by, anyone under 18 years of age. We do not knowingly collect information from minors; if we learn that we have, we will delete it.

12. Changes to this Policy

We may update this Policy. If we make a material change, we will provide notice at least fifteen (15) days before it takes effect — by email to your account address and/or a prominent notice in the Service — and we will state the new version’s effective date. Changes apply prospectively only. Each published version carries a version number and effective date, and prior versions are available on request.

13. Contact

Travidence, LLC — 800 N King Street, Suite 304-3527, Wilmington, Delaware 19801, United States — [email protected].