Bridge Trading — Privacy Policy

Version: 1.1 (incorporates Eversheds Sutherland review — ES Comments 7.28.26 / A. Allen 8.03.26) Last Updated: 2026-08-05 Effective: 2026-07-29

1. Who We Are

Bridge Trading Technologies LLC ("Bridge Trading," "we," "us," or "our"), a Georgia limited liability company, operates the website (the "Site") at bridgetrading.ai, the customer dashboard, the API, and all related tools (collectively, the "Service").

This Privacy Policy describes what information we collect, process, and disclose when you use the Service, how we use it, with whom we share it, and what choices you have. It applies to all customers and visitors of the Service, regardless of jurisdiction. Bridge Trading is the controller of the Personal Information described below. This Privacy Policy also describes any rights you may have regarding information about you and the way to contact us to exercise those rights. It also describes the extent to which we may disclose that information to non-affiliated third parties.

For questions about this Privacy Policy or to exercise any of the rights described in this Privacy Policy, contact us at [email protected].

2. What Information We Collect

We collect Personal Information from multiple sources: (a) directly from you when you create an account, make a purchase, contact us, or otherwise interact with the Service; (b) automatically as you navigate through and use the Service, using cookies and similar technologies described in Section 8; and (c) from third parties acting on your behalf, such as your Broker or brokerage-aggregation services you authorize to connect to the Service.

For purposes of this Policy, "Personal Information" means any information relating to an identified or identifiable natural person, such as a name, email address, identification number, location data, or online identifiers (for example, IP addresses that can be used to identify you). Personal Information does not include information that cannot be reasonably linked to you or that has been properly anonymized or de-identified.

2.1 Information you provide directly

Account-creation information: email address, password (hashed using argon2id or an equivalent modern password-hashing algorithm — we never store your plaintext password), display name, optional profile information.
Payment information: for Subscriptions, we collect your billing email, billing address (if required by your jurisdiction), and a payment-processor customer-reference token. Payment card purchases are processed by third-party payment processors. We do not have access to complete bank account numbers, credit card numbers, or debit card numbers.
Communications you send us: support requests, feedback, and any other correspondence you submit.
Account preferences: Signal Provider follow lists, execution mode settings (Mode C / B / A), risk parameters, notification preferences, watchlists, notes, and tags.
Disclosure acknowledgments: for each required disclosure, we log the document version, the SHA-256 hash, and the timestamp of your acknowledgment.

2.2 Information collected automatically

We automatically collect certain information from and about the use of the Site from your computers, mobiles, and other devices. Some automatically collected information is considered Personal Information under certain laws. This information is automatically collected using cookies and similar technologies. Please see Section 8 ("Cookies and Tracking Technologies") below for more information.

Device, usage, and browser information: browser type and version, operating system, screen resolution, language preference, time zone.
Usage data: pages visited, features used, time spent, click events, search queries you make within the Service, error events.
IP address and approximate location: derived to country and metropolitan-area level from your IP address; we do not derive precise GPS coordinates from IP.
Cookies and similar technologies: described in Section 8.
Server logs: request paths, response codes, user-agent strings, and timestamps.
Data we create: we may generate Personal Information about you, such as records of your interactions with the Service.

This automatically collected Personal Information may additionally be converted into aggregated and anonymized data which we will use for the purpose of data analytics, product development, and to improve our services, for our business purposes.

2.3 Information we receive from third parties on your behalf

We receive Personal Information from third parties in the following circumstances.

When you connect a Broker Account or a brokerage-aggregator integration, we receive:

From the Broker: order confirmations, fill prices, position summaries, balance information, and account identifiers (account number, position IDs).
From our brokerage-aggregation provider (for retail-brokerage connections): account holdings, balances, and order status. The aggregation provider is responsible for managing the underlying broker credentials; we do not see them.
From OAuth-capable Brokers: a scoped, revocable access token. We do not see your Broker password.

We may also receive Personal Information from service providers that perform functions on our behalf, such as payment processors and customer support tools.

2.4 Voluntariness of Providing Personal Information

In the context of our relationship, you only need to provide us with the Personal Information that is necessary for the establishment, implementation, and termination of our relationship and the fulfillment of the associated contractual obligations, or with the Personal Information that we are legally obliged to collect. If you do not provide us with this data, we will regularly not be able to enter into, perform, or terminate the relationship with you.

3. How We Use Your Information

We use the information described in Section 2 for the following purposes:

(a) To provide and operate the Service — process signals, dispatch orders, render the dashboard, deliver notifications, fulfill Subscription requests.

(b) To process payments — bill Subscriptions, process refunds (within the seven-day money-back window described in the Terms of Service), and handle failed-payment retries.

(c) To communicate with you — send Service-related notices (security alerts, billing reminders, terms changes), respond to support requests, send product updates if you have opted in.

(d) To improve the Service — analyze usage patterns, user feedback, and Service performance data to identify which features are most valuable, where users encounter friction, and what to build next. We may also use aggregated and anonymized data to conduct research and development, improve our products and services, and develop new features and offerings.

(e) To detect, prevent, and respond to fraud, abuse, security incidents, and violations of the Terms of Service — including customer-cap enforcement, Mode A allow-list enforcement, and broker-credential-related security incident response.

(f) To comply with legal obligations — including responding to subpoenas, court orders, tax reporting requirements, and applicable regulator requests where we are legally required to respond.

(g) To maintain audit logs required by the Terms of Service or our contractual obligations.

4. Personal Information We Collect, the Sources, Purpose, and Lawful Bases

The Personal Information we collect includes data within the categories below. These categories are defined by California law and represent the categories of Personal Information we may have collected about you. Where we collect this data, the purposes for which we process it, and how we have disclosed it to third parties in the past 12 months are consistent with how we treat other data under this Privacy Policy as described above. We do not necessarily collect all data listed in a particular category, nor do we collect all categories of data for all individuals. While the categories are as defined under California law, the disclosures below also apply to residents of other US states and data subjects of the EU and UK as well. For purposes of the General Data Protection Regulation ("GDPR"), we also have included the lawful bases.

We have disclosed data in the following categories with our service providers for our business purposes within the last 12 months. We may receive requests for data from regulatory authorities, our auditors and/or our legal advisors. If requested from such parties, we would disclose your Personal Information as appropriate.

Personal identifiers (such as a real name, alias, online identifier, Internet Protocol address, email address, or account name) - Source: directly from you via our Site or email, or when you interact with our Site via your computer or mobile device. - Purpose: to provide you with the Service you requested; to communicate with you; to respond to requests or inquiries or to inform you about Services you have purchased from us, including changes in Services or security standards; to protect against fraud; to personalize your experience on the Site. - Lawful bases: performance of contract, consent, legitimate interest (as specified in the purpose above).

Customer records and financial information (information that identifies, relates to, or describes you, such as your name, address, telephone number (if you provide it), brokerage account identifiers, and records received from your Broker such as positions, balances, and order history) - Source: directly from you via our Site or email, or from third parties acting on your behalf (your Broker or brokerage-aggregation provider you authorize). - Purpose: to provide you with the Service you requested; to communicate with you; to execute and record Copy Trade orders you have authorized; to protect against fraud; to maintain required audit records. - Lawful bases: performance of contract, consent, legitimate interest (as specified in the purpose above).

Commercial information (records of Services purchased, obtained, or considered, or other purchasing histories or tendencies) - Source: directly from you via the Site or email. - Purpose: to provide you with the Service you requested; to communicate with you; to respond to requests or inquiries; to personalize your Site experience. - Lawful bases: performance of contract, consent, legitimate interest (as specified in the purpose above).

Internet or other electronic network activity information (browsing history within the Service and information regarding your interaction with the Site) - Source: when you interact with our Site via your computer or mobile device. - Purpose: to develop our Site, products, and Services; to personalize your Site experience; for research analysis and business development. - Lawful bases: consent, legitimate interest (as specified in the purpose above).

Geolocation data (approximate location only, derived from IP address to country / metropolitan-area level) - Source: when you interact with our Site via your computer or mobile device. - Purpose: to develop our Site and Services; to protect against fraud; for research analysis and business development. - Lawful bases: consent, legitimate interest (as specified in the purpose above).

Inferences (limited inferences drawn from the information identified above, such as feature-usage patterns) - Source: we may generate this information about you from your use of the Service. - Purpose: to develop our Site and Services; for research analysis and business development. We do not draw inferences for targeted advertising, and we do not engage in profiling that produces legal or similarly significant effects. - Lawful bases: consent, legitimate interest (as specified in the purpose above).

We do not collect the following categories: biometric information; precise geolocation (GPS-level); characteristics of protected classifications; health, medical, or insurance information; education records; audio, video, thermal, or olfactory information; or other categories of Sensitive Personal Information as defined under applicable state privacy law. Bridge Trading does not currently have employees or accept employment applications through the Service; if that changes, this Policy will be updated to describe applicant and employment data practices.

Bridge Trading does not sell or share your Personal Information for targeted advertising or cross-context behavioral advertising, and does not engage in profiling or automated decision-making that produces legal or similarly significant effects. Over the last 12 months, Bridge Trading has not sold or shared (as those terms are defined under California law) identifiers, commercial information, Internet or other electronic network activity information, geolocation data, or any other categories of Personal Information with marketing or advertising partners for targeted advertising purposes.

Bridge Trading does not work with advertising networks to deliver targeted advertisements to you based on your activity on the Service. We do not allow third parties to collect Personal Information about your online activities over time and across different websites when you use the Service.

If you are under 18, we do not knowingly process your Personal Information for targeted advertising purposes.

Because Bridge Trading does not sell or share Personal Information for targeted advertising, there is no sale or sharing to opt out of. However, if you have questions about our data practices or wish to exercise any privacy rights, please see Section 11, Your Rights.

We limit the disclosure of your Personal Information to others. However, we share Personal Information with people and businesses that help operate the Site and carry out our business, and when we are legally permitted or required to do so. We also share Personal Information when an individual requests we share it.

We may share Personal Information with the following categories of recipients:

Professional advisors, such as lawyers, accountants, insurers, information security and forensics experts.
Service providers, contractors, and other third parties — such as payment processors, cloud/hosting providers, edge-security/CDN providers, secrets-management vendors, brokerage-aggregation providers, Brokers (for order routing), AI/large-language-model inference providers (for The Analyst feature, where enabled), and customer-support and transactional-email tools — to enable them to perform services on our behalf, including website and data hosting, service delivery, data analytics, and data security. Each service provider is contractually bound to use your information only for the purpose of providing services to us.
Potential or actual acquirers or investors and their professional advisers in connection with any actual or proposed merger, acquisition, or investment in or of all or any part of our business.
Competent law enforcement, government regulators, and courts when we believe disclosure is necessary (i) to comply with the law, (ii) to exercise, establish, or defend legal rights, or (iii) to protect the rights, property, and safety of us, our consumers, business partners, service providers, or another third party.

Bridge Trading does not share Personal Information with third-party advertising networks, data brokers, or data aggregators for marketing purposes, and does not disclose customer email lists or customer identities to marketing vendors.

We may also share aggregated, anonymized statistics about Service usage that cannot reasonably be used to identify you.

7. International Transfers

Our Site is controlled and operated by us from the United States. Any information you provide to us through use of the Site may be stored in, processed in, transferred between, and accessed from the United States and other countries which may not guarantee the same level of protection of Personal Information as the one in which you reside.

If you are an EU or UK resident, this will mean that your Personal Information may be transferred to, accessible from, and/or stored at, a destination outside the EU or UK in which data protection laws may not be as comprehensive as in the EU or UK.

Regardless of the location of our processing, we will implement appropriate measures to ensure that your Personal Information is protected in accordance with applicable data protection laws. Similarly, where a third-party service provider processes the Personal Information of EU or UK residents on our behalf, we will ensure that appropriate measures are in place to ensure an adequate level of protection for your Personal Information.

If any of our processing activities require your Personal Information to be transferred from within the EU or UK to outside the EU or UK, we will only make that transfer if:

the country to which the Personal Information is to be transferred ensures an adequate level of protection for Personal Information;
we have put in place appropriate safeguards to protect your Personal Information, such as an appropriate contract with the recipient;
the transfer is necessary for one of the reasons specified in data protection legislation, such as the performance of a contract between us and you; or
you explicitly consent to the transfer.

Please contact us as directed below in the "Contact Us" section if you would like to receive more information about transfers to third countries or see a copy of the specific safeguards applied to the export of your Personal Information.

8. Cookies and Tracking Technologies

This Section explains what cookies and similar technologies are, what types we use, and how you can manage them. Various technologies are used to automatically collect information, such as cookies, local shared objects, and web beacons (generally referred to as "Data Technologies"). "Cookies" are small identifiers sent from a web server that are stored on your device for the purpose of identifying your browser or storing information or settings in your browser. "Local shared objects" may be used to store your preferences or display content based upon what you have viewed on various websites to personalize your visit. A "web beacon," also known as an Internet tag, pixel tag, or clear GIF, links web pages to web servers and their cookies. When we refer to Data Technologies, we are including all current and similar future technologies.

8.1 What types of cookies do we use?

Depending on how you use the Service, we may use the following types of cookies:

Strictly Necessary Cookies enable the Service to function and cannot be disabled. They respond to your requests, such as setting privacy preferences, logging in, maintaining your authenticated session, and protecting against cross-site request forgery (CSRF).
Analytics and Performance Cookies (optional) track how the Service is used, counting visits and traffic sources to improve the Service. These cookies help us understand which features are most valuable and where users encounter friction. Our analytics are first-party (our own server logs); we do not embed third-party cross-site analytics tools.
Functionality Cookies (optional) remember your login, preferences (such as theme and layout), and other settings to provide a more tailored experience.

8.2 First-party and third-party cookies

First-party cookies come from us. Third-party cookies come from other parties and can recognize your device across different websites. We do not set third-party advertising cookies on the Service. If a third-party cookie is set by an embedded integration, we do not control that cookie or how it may be used; if you have any questions about third-party cookies, you should contact the responsible provider directly.

8.3 Persistent and session cookies

Persistent cookies stay on your device until they expire or you delete them, and may be used to analyze user behavior across sessions. Session cookies are temporary and expire when you close your browser, tracking your activity only during your visit.

8.4 What information do cookies collect?

Cookies usually contain the domain name (internet location) from which they originated, the expiration date, and a unique identifier. They may also store information about your device, such as its settings, browsing history within the Service, and activities while using the Service.

8.5 Learn More and Opt-Out

You may decide whether you want to accept cookies or not. You can configure your browser to refuse cookies. If you refuse the session cookie, you will not be able to log in to the Service.

On your Internet browser you can adjust your settings to reject some or all cookies or to alert you when a cookie is placed on your device. The "help" feature on most browsers will provide you more information on how to do this. For more help with adjusting your cookie settings, please see www.allaboutcookies.org/manage-cookies/. Please note that if you choose to block all cookies (including strictly necessary cookies), you may not be able to access or use all or parts of the Service and/or parts of the Service may not function properly. If you want to delete previously stored cookies, you can manually delete them at any time. Doing so will, however, prevent the Service from placing further cookies on your device unless and until you adjust your browser settings. For more information on the development of user profiles and the use of targeting cookies, please see www.aboutads.info/choices in the United States and www.youronlinechoices.eu if you are located in Europe.

8.6 Do Not Track and Global Privacy Control

Some browsers transmit "Do Not Track" (DNT) signals to websites. Because there is no common industry standard for interpreting DNT signals, the Service does not currently alter its data collection or use practices in response to DNT signals. We recognize the Global Privacy Control (GPC) signal as a valid opt-out request for the sale or sharing of Personal Information for targeted advertising or cross-context behavioral advertising, to the extent required by applicable law. Because Bridge Trading does not sell or share Personal Information for targeted advertising or cross-context behavioral advertising, the GPC signal will confirm your opt-out status but will not change our data practices with respect to your account. You may still receive generic information about our Service.

9. Data Security and Protection of Personal Information

We maintain physical, electronic, and procedural safeguards designed to protect your Personal Information. We use reasonable best efforts to require that any person or institution to which we disclose Personal Information will protect the confidentiality of that information and use the information only for the purposes for which we disclose the information to them. In addition, we restrict access to nonpublic Personal Information to those personnel who need to know that information in the course of their responsibilities.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to the Service. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Service.

We acknowledge that no security system is impenetrable. We disclaim any warranty of impenetrability and refer clients to the Terms of Service.

Notwithstanding the foregoing, Bridge Trading cannot guarantee that its security measures will prevent unauthorized access, theft, or disclosure of your information. The storage of Broker credentials, even encrypted, carries inherent risk. You acknowledge that in the event of a security incident affecting your Broker credentials, you may suffer trading losses, unauthorized transactions, or other financial harm before the incident is detected and remediated. Bridge Trading's liability for any such incident is limited as set forth in the Terms of Service. Additional detail on credential handling appears in the Broker Credential Handling Disclosure.

10. Data Retention

When determining the appropriate length of time for retention, multiple factors are taken into account, including: the nature and sensitivity of the Personal Information; the purposes for which the information is required; any laws or regulations that we are required to follow; and the period of time during which any claims or proceedings can be brought against us to defend against any such claims. We reserve the right to retain and use Personal Information for as long as necessary to comply with our legal and regulatory obligations and business requirements and/or to resolve any ongoing disputes and enforce our agreements. For the avoidance of doubt, data will not be destroyed before any regulatory retention period expires, or during a pending investigation, whether legal or regulatory. For example, trade audit records (signal received → dispatch → fill confirmation) are retained for at least seven (7) years from the event date.

The same Personal Information about you may be included in more than one record and used for more than one purpose, each of which may be subject to different retention periods based on the factors listed above.

If you would like further information on our retention periods, please reach out to us through the details in the "Contact Us" section below.

11. Your Rights

Depending on your jurisdiction, you may have one or more of the following rights regarding your Personal Information:

Right to access/know — Depending on your jurisdiction, you may have the right to: (a) know and request information about the categories and specific pieces of Personal Information we have collected about you, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the categories of third parties to whom we share such information; (b) know if we have sold or disclosed your Personal Information, including the categories of third parties to whom we have disclosed Personal Information; (c) access any inferences derived from your Personal Information; and (d) know whether we use your Personal Information for the purpose of training large language models (see Section 12 for our AI training policy).
Right to withdraw consent — Where our processing of your Personal Information is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal. If you withdraw consent, we will stop processing your Personal Information for that purpose unless there is another lawful basis upon which we rely, in which case we will notify you.
Right to correct/rectify — You may have the right to request correction of any inaccurate Personal Information we hold about you. We may not be able to accommodate your request if we believe it would violate any law, legal requirements, or cause the information to be incorrect. Information solely retained for data backup purposes is generally excluded from this right.
Right to deletion — to request deletion of your Personal Information, subject to limitations described below.
Right to limit use and disclosure of Sensitive Personal Information — To the extent we process or disclose Sensitive Personal Information, you may have the right to limit our use of this information to purposes necessary for performing the services or providing the goods you request. (As described in Section 4, we do not collect Sensitive Personal Information.)
Right to data portability — You may have the right to obtain Personal Information about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another entity without hindrance.
Right to opt out of sale, sharing, or profiling — To the extent we share Personal Information for purposes of targeted advertising or cross-context behavioral advertising, you may have the right to opt out. To the extent we engage in profiling or automated decision-making that produces legal or similarly significant effects, you may have the right to opt out. Bridge Trading does not currently sell or share Personal Information for targeted advertising and does not engage in profiling or automated decision-making that produces such effects.
Right to non-discrimination — Bridge Trading will not deny you the Service, charge a different price, or provide a lower quality of Service because you exercise a privacy right.
Right to appeal — You may have the right to appeal our decision regarding a privacy rights request. To appeal, email [email protected] with the subject line "Privacy Request Appeal." Please use the same email address that you used to submit the initial privacy rights request. If you do not use the same email address, we may not be able to link your appeal to your initial request. We will respond to your appeal within the timeframes required by applicable law.
Right to lodge a complaint with a supervisory authority — If you believe that we have not complied with data protection regulations when processing your Personal Information, you may lodge a complaint with the competent supervisory authority in your country of residence, place of work, or the place of the alleged infringement.

Data solely retained for data backup purposes is principally excluded from these rights until it is restored to an active system or next accessed or used for a sale, disclosure, or commercial purpose. These rights also do not apply to pseudonymous data if the information necessary to identify the individual is kept separately and is subject to controls that prevent access to the information.

11.1 Exercising your rights

To exercise any of these rights, contact us at [email protected]. Depending on your jurisdiction, we have between 30 and 90 days to respond to your request. If we require more time, we will inform you of the reason and extension period in writing.

You may designate an authorized agent to submit a request on your behalf. If you use an authorized agent, the agent must provide us with: (a) your signed written permission authorizing the agent to submit the request on your behalf; or (b) evidence of a valid power of attorney or conservatorship. We may contact you directly to confirm that you authorized the agent to act on your behalf.

When you submit a request to exercise any of the rights described in this Section, we will verify your identity before processing your request. Verification may include confirming your email address, your relationship with Bridge Trading, and other information you have previously provided to us. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will use the Personal Information you provide when submitting a consumer request only to verify the requestor's identity or authority to make the request.

There may be circumstances where we will not be able to honor your request, in which case we will notify you. For example, if you request deletion, we may need to retain certain Personal Information to comply with our legal obligations or other permitted purposes (including trade audit logs subject to our seven-year retention obligation, disclosure acknowledgments retained as evidence of informed consent, and records subject to a pending legal hold, audit, or investigation). Depending on your jurisdiction, you may have the right to appeal this decision or to contact your Attorney General if you have concerns about the results of the appeal.

Please note that depending on your jurisdiction (not applicable for EU/UK), we are only obligated to respond, free of cost, to Personal Information requests from the same consumer up to two times in a 12-month period. Depending on your jurisdiction, after you have exceeded the applicable number of requests, we have the right to charge a reasonable fee for fulfilling the request. In addition, under the applicable state privacy law, and for the protection of your Personal Information, we may be limited in what Personal Information we can disclose.

Depending on your jurisdiction, we may maintain your rights requests for at least 2 years. This information will not be used for any other purpose except to review compliance processes; it will not be shared except as necessary to comply with a legal obligation.

11.2 Receiving our response to your rights request

If you have an account with us, we will deliver our response to the email address associated with your account. For data portability requests, we will provide your Personal Information in a commonly used, machine-readable format (such as CSV, JSON, or Excel) that allows you to transmit the information to another entity.

Except for EU/UK data subjects, any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

11.3 California "Shine the Light" (Residents of California and Certain Other US States)

To exercise California-specific rights, including certain of the rights set forth above, email [email protected] with the subject line "CCPA Request."

California's "Shine the Light" law (Civil Code § 1798.83) permits California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. Bridge Trading does not disclose Personal Information to third parties for their direct marketing purposes. To confirm this status, email [email protected] with the subject line "Shine the Light Request."

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation, the UK GDPR, or the Federal Act on Data Protection, including all rights described above. In addition to those rights, you have the right to object to processing of your Personal Information where we rely on legitimate interests as our legal basis, unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

Our legal basis for processing your Personal Information is one or more of: (i) performance of the contract between you and us (the Terms of Service), which is the basis for processing necessary to provide the Service, including account creation, order execution, and customer support; (ii) your consent (for marketing communications, if you opt in), which you may withdraw at any time without affecting the lawfulness of processing before withdrawal; (iii) our legitimate interests (operating, securing, and improving the Service, fraud prevention, security monitoring, and operational analytics, where our interests are not overridden by your data protection rights); or (iv) compliance with a legal obligation (including tax and regulatory recordkeeping requirements).

If you are an EEA / UK / Swiss customer and the data we hold about you needs to be transferred to the United States to deliver the Service, we rely on the Standard Contractual Clauses adopted by the European Commission, as supplemented by applicable additional safeguards. Where we transfer Personal Information outside the EEA, UK, or Switzerland, we will only make that transfer under the conditions described in Section 7. To request more information about international transfers or a copy of the safeguards we use, contact us at [email protected].

We do not currently have a designated EU representative. If significant EU customer volume develops, we will appoint one and update this Policy accordingly.

12. Artificial Intelligence and Customer Data

Bridge Trading uses third-party large language model providers to power "The Analyst" feature of the Service, where enabled. When you submit a prompt to The Analyst:

Your prompt is transmitted to the LLM provider's API for processing.
The response is returned to your browser.
A copy of the conversation is stored in your account history within the Service.

Bridge Trading does not train artificial-intelligence models on customer data. Specifically:

(a) We do not use your prompts to The Analyst as training data for any model; (b) We do not use your conversation history, trade history, notes, tags, watchlists, or any other individual content as training data; (c) We do not share your content with the LLM provider for the purpose of training their public foundation models — our contracts with these providers require them to use API-routed customer content only for inference, not for training.

Where we use aggregated, anonymized usage statistics to improve Service prompts and internal evaluations, we strip all Personal Information. Example acceptable use: "60% of customers who asked The Analyst about Mode A configuration received a response longer than 800 tokens." Example prohibited use: "Customer X asked about Mode A configuration on May 15."

If this changes, we will update this Privacy Policy.

13. Children's Privacy

The Service is not intended for individuals under the age of eighteen (18). We do not knowingly collect Personal Information from anyone under the age of 18 without verifiable parental consent. If we become aware that we have inadvertently collected Personal Information from a child under the age of 18, we will delete such information from our records. If a parent, guardian, or anyone else becomes aware that we have collected Personal Information from an individual under the age of 18, please contact us at [email protected]. Individuals between eighteen (18) and twenty-one (21) years of age should carefully consider whether active trading, including day trading and options trading, is appropriate for their financial circumstances.

14. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with Personal Information.

We may include applications or widgets from social media providers that allow interaction or content sharing by their users. These widgets, such as a "Share" or "Like" button, may be visible to you on our Site. Integration between our Site and social media networks may allow social media networks in which you participate to collect information about you, even when you do not explicitly activate the network's application or widget. Please visit the applicable social media network's privacy policy to better understand their data collection practices and choices they make available to you. The privacy policy of the social media network controls the collection, use, and disclosure of all Personal Information transmitted to that network.

15. Changes to This Policy

This Policy and the practices described are subject to change at any time. Accordingly, we recommend you check for updates to this Policy on an ongoing basis. If we make changes to this Policy, we will update the date it was last changed. We may also notify you of material changes to this Policy either via our Site or email.

The "Last Updated" date at the top of this Policy indicates when it was last revised. Continued use of the Service after a material change takes effect constitutes acceptance of the updated Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the Personal Information we hold about you, contact us at:

Bridge Trading Technologies LLC Attn: Privacy 426 Waterford Drive, Cartersville, Georgia 30120 Email: [email protected] Website: bridgetrading.ai