Privacy Policy

TECS, LLC — HypeTrade Platform

Effective Date: April 12, 2026 — Last Updated: April 12, 2026

This Privacy Policy ("Policy") describes how TECS, LLC ("Company," "we," "us," or "our"), a Virginia limited liability company, collects, uses, discloses, stores, and protects personal information and data in connection with the HypeTrade platform accessible at hypetrade.io, admin.hypetrade.io, docs.hypetrade.io, and any associated services (collectively, the "Platform" or "Services").

By accessing or using the Services, you ("User," "you," or "your") acknowledge that you have read, understood, and consent to the practices described in this Policy. If you do not agree to this Policy, you must not access or use the Services.

This Policy should be read in conjunction with our Terms of Service, which are incorporated herein by reference.

1. Information We Collect

1.1. Information You Provide Directly

Account Registration Information: Username, email address, and password hash when you create an account.
Payment Information: When you subscribe or purchase credits, payment is processed by Stripe, Inc. ("Stripe") or through supported cryptocurrency payment methods. We store your Stripe customer identifier, subscription identifiers, transaction history, and billing metadata. We do not store full credit card numbers, CVV codes, or bank account details. For cryptocurrency payments, we store transaction hashes, wallet addresses used for payment, and payment status.
Wallet Private Key: If you use automated trading features, you provide a private key. These keys are encrypted at rest using AES-256 or equivalent encryption and stored in AWS Secrets Manager. We access these keys solely to execute trading operations on your behalf as authorized by you. We may use your wallet credentials to set a HyperLiquid referral code on your behalf. This referral code reduces your trading fees and generates referral income that helps keep HypeTrade subscription prices competitive and funds subscription credits for active traders.
Trading Configuration Data: Strategy configurations, indicator settings, preset selections, leverage parameters, symbol preferences, and all other settings you configure within the Platform.
Communication Data: If you contact us for support, we collect the content of your communications, including email addresses and any attachments.
Anthropic API Key: The API key you provide to enabling AI-powered analysis features. This key is securely stored in Amazon Secrets Manager and is used only to generate AI analysis or to monitor and adjust your trading strategies when those features are triggered. We do not use your key for any other purpose.

1.2. Information Collected Automatically

Usage Data: Pages visited, features used, buttons clicked, search queries, time spent on pages, session duration, and interaction patterns within the Platform.
Device and Browser Information: IP address, browser type and version, operating system, device type, screen resolution, language preferences, and referring URLs.
Log Data: Server logs recording API requests, timestamps, HTTP methods, response codes, and request parameters (with sensitive data such as API keys redacted).
Cookies and Similar Technologies: We use essential cookies to maintain your session, authentication state, and user preferences. See Section 7 for details.

1.3. Information Generated Through Your Use

Trade Data: Internal records of trades executed through the Platform, including entry/exit prices, timestamps, profit/loss calculations, exit reason codes, position sizes, and symbols traded. This data is generated from your interaction with Third-Party Exchanges through the Platform.
Backtest Results: Simulation results, performance metrics, and historical analysis data generated from your backtesting activities.
AI Analysis Data: Outputs from AI-powered optimization, including recommended configurations, analysis reports, and optimization run history.
Performance Metrics: Aggregated statistics including win rates, cumulative P&L, drawdown calculations, and other analytics derived from your trading activity.
Credit Transaction History: Records of credit consumption, purchases, refunds, and balance changes.
Blockchain Transaction Data: When you pay fees on Arbitrum or the exchange, the wallet address, transaction hash, and fee amount are recorded on the public blockchain. We do not link these public on-chain records to your personal information or account.

1.4. Information from Third-Party Services

Third-Party Exchange Data: Market data, account balances (for display purposes only), position information, and trade confirmations retrieved from Third-Party Exchanges through your API keys.
Payment Processor Data: Transaction status, payment confirmations, and billing events received from Stripe.

2. How We Use Your Information

2.1. We use the information collected for the following purposes:

Providing and Operating the Services: Processing your trading instructions, executing backtests, generating AI recommendations, displaying market data, managing your account, and delivering all features of the Platform.
Payment Processing and Billing: Processing subscription payments, credit purchases, prorated refunds, and maintaining billing records.
Account Security and Fraud Prevention: Detecting and preventing unauthorized access, fraudulent activity, trial abuse (including tracking email and IP associations to prevent duplicate trial accounts as described in our Terms of Service), and other violations of our Terms.
Service Improvement and Analytics: Analyzing usage patterns (in aggregated, de-identified form where practicable) to improve Platform features, performance, reliability, and user experience.
Technical Support and Communication: Responding to support requests, providing account notifications (e.g., subscription expiration, payment failures, bot status alerts), and delivering service-related communications.
Legal Compliance and Protection: Complying with applicable laws, regulations, and legal processes; protecting the Company's rights, property, and safety; and enforcing our Terms of Service.
Infrastructure Monitoring: Automated monitoring of Platform health, performance, and security through AI-powered agents operating within the Company's infrastructure.

3. How We Share Your Information

3.1. We do not sell your personal information to third parties. We share your information only in the following limited circumstances:

Third-Party Exchange Execution: Your API keys and trade instructions are transmitted to the Third-Party Exchange(s) you have connected to execute your authorized trading operations. We do not share your personal information (name, email, etc.) with Third-Party Exchanges.
Payment Processors: We share necessary billing information with Stripe to process payments, manage subscriptions, and issue refunds. Information shared with Stripe is subject to Stripe's privacy policy (https://stripe.com/privacy).
Cloud Infrastructure Providers: Your data is processed and stored on Amazon Web Services ("AWS") infrastructure located in the ap-northeast-3 (Osaka, Japan) region. Data handling by AWS is governed by the AWS Data Processing Addendum and applicable AWS service terms.
Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to:
1. Comply with a legal obligation;
2. Protect and defend the rights, property, or safety of the Company, our Users, or the public;
3. Detect, prevent, or address fraud, security issues, or technical problems;
4. Enforce our Terms of Service.
Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of the Company's assets, your information may be transferred as part of the transaction. We will provide notice before your information becomes subject to a different privacy policy.
Aggregated and De-Identified Data: We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for research, analytics, business intelligence, or promotional purposes.

3.2. Marketplace Interactions. If you buy or sell strategies through the Platform's marketplace, limited transactional information (such as transaction amounts and marketplace ratings) may be visible to other marketplace participants. Your identity will be represented by your username only.

4. Data Storage, Security, and Retention

4.1. Storage Infrastructure

Primary Storage: User data is stored in Amazon DynamoDB and Amazon EFS (Elastic File System) on AWS infrastructure in the ap-northeast-3 (Osaka, Japan) region.
Static Assets: Frontend assets and documentation are served via Amazon S3 and Amazon CloudFront CDN.
Secrets Management: Exchange API keys and other sensitive credentials are encrypted at rest using AES-256 or equivalent and stored in AWS Secrets Manager.

4.2. Security Measures

We implement industry-standard security measures to protect your data, including but not limited to:

Encryption of data in transit using TLS 1.2 or higher;
Encryption of sensitive data at rest using AES-256 or equivalent;
API key encryption via AWS Secrets Manager with Fernet encryption;
TOTP-based two-factor authentication for administrative access;
CORS (Cross-Origin Resource Sharing) policies restricting API access;
Regular security audits and vulnerability assessments;
Network-level security controls including VPC, security groups, and WAF rules;
Automated monitoring and alerting for suspicious activity.

4.3. Data Retention

Active Accounts: Your data is retained for the duration of your account plus ninety (90) days following cancellation or termination, after which it may be permanently deleted.
Trade History: Trade records may be retained for up to seven (7) years for regulatory compliance and audit purposes, even after account deletion.
Payment Records: Billing and transaction records may be retained for up to seven (7) years to comply with tax and financial record-keeping obligations.
Log Data: Server logs and access logs are retained for a maximum of ninety (90) days for security and operational purposes, after which they are automatically purged.
Backtest Results: Backtest data stored on EFS is retained during your active subscription and for ninety (90) days after account cancellation, after which it may be deleted.
IP and Registration Data: IP addresses and device identifiers collected during registration are retained for the purpose of fraud prevention and trial abuse detection for up to two (2) years.

4.4. Data Deletion Requests

You may request deletion of your data by using the Data Management feature in the Account section of the Platform or by contacting us at the email address provided in Section 10. Upon receiving a valid deletion request, we will delete or de-identify your personal information within thirty (30) days, except for data we are required or permitted to retain under applicable law. Deletion of your account is permanent and cannot be reversed.

5. Your Rights and Choices

5.1. Subject to applicable law, you may have the following rights regarding your personal information:

Right of Access: You may request a copy of the personal information we hold about you.
Right of Correction: You may request correction of inaccurate or incomplete personal information.
Right of Deletion: You may request deletion of your personal information, subject to certain exceptions (see Section 4.4).
Right to Data Portability: You may request a copy of your data in a commonly used, machine-readable format.
Right to Object: You may object to certain processing of your personal information where we rely on legitimate interests.
Right to Restrict Processing: You may request that we restrict the processing of your personal information in certain circumstances.

5.2. Exercising Your Rights. To exercise any of these rights, please contact us using the information provided in Section 10. We may verify your identity before processing your request. We will respond to valid requests within thirty (30) days.

5.3. Account Settings. You may update your account information, change your password, and manage certain privacy preferences directly through the Platform.

6. Children's Privacy

6.1. The Services are not intended for use by individuals under the age of eighteen (18), or the age of majority in their jurisdiction, whichever is greater. We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a minor, we will take steps to delete such information promptly. If you believe a minor has provided us with personal information, please contact us immediately.

7. Cookies and Tracking Technologies

7.1. Essential Cookies. We use strictly necessary cookies to authenticate your session, maintain login state, store user preferences (such as theme settings), and ensure the proper functioning of the Platform. These cookies cannot be disabled without impairing the Platform's functionality.

7.2. No Third-Party Advertising Cookies. We do not use advertising cookies, behavioral tracking cookies, or share your browsing data with third-party advertising networks.

7.3. Analytics. We may use first-party analytics to understand how Users interact with the Platform. Such analytics are processed in aggregated form and are not used to identify individual Users for marketing purposes.

7.4. Cookie Management. You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from accessing certain features of the Platform.

8. International Data Transfers

8.1. Your data is primarily stored and processed on AWS infrastructure in the ap-northeast-3 (Osaka, Japan) region. Data may be transferred to and processed in other jurisdictions where the Company, its affiliates, or its service providers operate, including the United States.

8.2. Where data is transferred internationally, we rely on appropriate safeguards, including standard contractual clauses, data processing agreements with service providers, and other mechanisms recognized by applicable data protection authorities.

8.3. By using the Services, you consent to the transfer, processing, and storage of your information in jurisdictions that may have different data protection standards than your jurisdiction of residence.

9. Changes to This Policy

9.1. The Company reserves the right to update or modify this Policy at any time by posting the revised Policy on the Platform with an updated effective date. Material changes will be communicated via email or prominent notice on the Platform at least thirty (30) days prior to taking effect.

9.2. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must discontinue your use of the Services.

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

TECS, LLC
Commonwealth of Virginia, United States of America
Email: HypeTradeSupport@hypetrade.io
Website: https://app.hypetrade.io

11. Virginia-Specific Disclosures

11.1. Virginia Consumer Data Protection Act (VCDPA). If you are a Virginia resident, you may have additional rights under the VCDPA, including the rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of processing for targeted advertising, sale of personal data, or profiling. We do not sell personal data. To exercise your rights, contact us using the information in Section 10. If we decline to take action on a request, you may appeal by contacting us, and if unsatisfied with the outcome, you may contact the Virginia Attorney General.

12. California-Specific Disclosures

12.1. California Consumer Privacy Act (CCPA/CPRA). If you are a California resident, you have additional rights under the CCPA, as amended by the CPRA, including:

The right to know what personal information we collect, use, and disclose;
The right to request deletion of your personal information;
The right to opt out of the sale or sharing of personal information;
The right to non-discrimination for exercising your privacy rights.

12.2. We do not sell or share (as defined by CCPA) your personal information.

12.3. Categories of Information Collected: As described in Section 1, we collect identifiers, commercial information, internet activity information, and geolocation data (IP-derived). We do not collect biometric information, education information, or protected classification characteristics.

12.4. To exercise your California privacy rights, contact us using the information in Section 10 or submit a request through the Data Management feature in the Account section of the Platform.

BY USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY.