Privacy Policy

Last updated: October 27, 2026

1. Who we are

EdgeBook is operated by Archipelago Ventures, LLC ("we," "us," or "our"). This Privacy Policy explains what personal information we collect, how we use and disclose it, and the choices you have. It covers our website at www.edgebook.io, the EdgeBook app at app.edgebook.io, shared trade links, the EdgeBook MCP server, and the emails we send (together, the "Service").

Archipelago Ventures, LLC is the controller of the personal information described here. You can reach us about anything in this policy at alex@edgebook.io.

2. Information we collect

Information you give us

• Account information: your email address, your name if you provide it, and your password or sign-in links.
• Payment information: when you subscribe, Stripe collects your name, email address, country, and card details. We receive your subscription status and billing history, never your full card number.
• Journal content: trades, symbols, dates, prices, notes, tags, ratings, setups, checklists, bookmarks, saved views, and the chart screenshots and other images you upload.
• EdgeBook AI conversations: the messages you send to the assistant and its replies.
• Sharing and invitations: comments you post on shared trades, and the email addresses of people you invite to view your trades or setups.
• Messages to us: support emails and anything you submit through the in-app feedback widget.
• Newsletter: the email address you enter in the website footer.

Information collected automatically

• Usage data in the app: the pages you visit, the buttons and links you click with their visible labels, dialogs you open, time spent, errors you see, and product events such as creating a trade, including the trade's symbol.
• Usage data on the website: the pages you visit, how far you scroll, which sections you see, the links into the app you click with their visible labels, public worksheet download clicks, product-demo starts and completions, and time spent. A random identifier kept in your browser's local storage, and added to a link into the app when you follow it, connects these visits to your first visit in the app. We never read what you type into the website's forms.
• How you found us: the referring site and campaign tags (such as UTM parameters) of your first visit. We attach these to your checkout so we know which channels bring subscribers.
• Device and location: browser, operating system, screen size, language, time zone, an identifier stored in your browser, and an approximate location (country, region, and city) derived from your IP address.
• Log data: IP address, access times, and the requests your browser makes to our servers.

3. How we use your information

We use personal information to:

• Provide the Service: store your journal, sign you in, run the features you use, and process your subscription
• Send service emails, such as sign-in links, billing notices, and invitations you ask us to send
• Answer your questions and support requests
• Understand how the Service is used so we can fix problems and improve it
• Measure which of our ads and channels lead to sign-ups
• Send the newsletter, if you subscribed
• Detect, prevent, and investigate errors, abuse, and security incidents
• Keep billing and tax records and meet other legal obligations

Authorized EdgeBook staff can view usage activity per account in an internal dashboard, including approximate city-level location, how you found us, and whether a checkout was started but not completed.

Legal bases (EEA, UK, and Switzerland)

• Contract: to provide the Service you signed up for, including storing your journal, running EdgeBook AI when you use it, and billing.
• Legitimate interests: to keep the Service secure, monitor errors, understand usage, and improve the product. You can object at any time (see section 10).
• Consent: for optional Google visit and purchase measurement and for the newsletter. You can withdraw consent at any time.
• Legal obligation: to keep billing and tax records.

4. Sharing your content with others

Some features show your content to other people because you ask them to:

• Share links: anyone with a share link to a trade or setup can see what that share shows, including its symbol, dates, notes, tags, prices, and chart images, without signing in. You can revoke a link at any time.
• Link previews: when you paste a share link into Slack, X, Discord, or a messaging app, that service fetches a preview card with the trade's symbol, direction, result, and chart image. The service may keep its own copy of that preview.
• Comments: comments you post on a shared trade appear with your display name to everyone who can see that trade.
• Invitations: when you invite someone, we email them your name and the name of what you shared.
• Members you share with: people you share with can see the shared content, and their EdgeBook AI can read it when they ask about it.

5. Service providers

We do not sell your personal information. We disclose it to the service providers below, who process it for us to run the Service.

AI providers

Every EdgeBook AI request goes through OpenRouter, which sends it on to a company that hosts the model. Section 6 describes what each feature sends.

Market data

Chart price data comes from Massive through a service we host on Railway. These requests contain ticker symbols and date ranges only, never your account or journal details. If you add your own Twelve Data API key in Settings, chart requests go to Twelve Data with that key.

Other disclosures

We may disclose information if the law requires it, to protect the rights, property, or safety of our users or others, or as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply to your information.

Changes to the provider list: we will update this section and the "Last updated" date before a new provider starts processing your content. If a change materially affects how your journal content or chart images are handled, we will also tell you by email or in the app.

6. EdgeBook AI

EdgeBook includes AI features: a chat assistant that answers questions about your journal, chart recognition that reads an uploaded screenshot, setup summaries, and trade drafts for connected MCP clients.

Models and hosts

The chat assistant runs on Qwen3.7 Plus, or on Qwen3.8 Flash in the Fast response mode, with OpenAI GPT-5.6 luna as the fallback when the primary model is unavailable. Chart recognition and setup summaries run on Qwen3.7 Flash. Trade drafts run on OpenAI GPT-5 nano. OpenRouter picks the host for each request from the companies that serve that model and agree not to use request data for training. For the Qwen models those hosts include Alibaba Cloud; for the OpenAI models, OpenAI and Microsoft Azure. We may change these models, and we will update this section and the "Last updated" date when we do.

What each feature sends

• Chat assistant: your message, the page you have open, and the trades, notes, setups, strategies, and chart screenshots the assistant looks up to answer you. It reads your own journal and, when you ask about them, trades, setups, saved views, and comments other members have shared with you, limited to what each share shows. It cannot read anyone else's journal.
• Chart recognition: the chart image, so the model can read the visible symbol, direction, timeframe, and date. It runs automatically when you add the first image to a new trade.
• Setup summaries: the description of each of your saved setups that has no short summary yet. They are generated automatically when you open the page that lists your setups.
• Trade drafts: the note text your MCP client sends.

Training and provider retention

We do not train any model on your content. Our OpenRouter account has the option to use inputs and outputs for model improvement turned off, and every request we send asks OpenRouter to use only hosts that do not train on request data. OpenRouter keeps metadata about each request.

Beyond that, we can tell you what each host states, not what we can guarantee. Alibaba Cloud states that it does not train on customer data; it publishes no retention period for the inputs it receives for inference. OpenAI states that its API does not train on inputs and keeps them for up to 30 days for abuse monitoring.

Where AI processing happens

OpenRouter is a United States company. Requests for the Qwen models may be processed by Alibaba Cloud in Singapore or mainland China. That includes your chat messages, the journal content the assistant reads to answer them, chart images sent for recognition or review, and setup descriptions. Chart recognition and setup summaries run without a separate request from you, and the app does not yet have a setting to turn them off. If you do not want your content processed in these locations, contact us before adding charts or setups and we will tell you your options.

Conversations we store

Your chat threads are stored in your account until you delete them. You can delete a single thread from the chat panel's history, delete every conversation at once from Settings, or ask us to delete your account, which removes them with the rest of your data. Deletion removes them from our active database; backups age out within 30 days.

EdgeBook staff do not read your conversations. The app has no administrative view of another user's threads, and the AI features can access only what the signed-in user can see in EdgeBook. We record that a conversation happened and its length, not its content.

Accuracy

AI output is generated text. It can be wrong, including about your own numbers, and it is not investment advice. Check anything you intend to rely on against your journal.

7. Data storage and security

Your data is stored with Supabase. It is encrypted in transit and at rest, and row-level security keeps each account's records separate. Supabase maintains a SOC 2 Type 2 report for its platform.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as the law requires.

8. How long we keep information

• Account and journal content: while your account is open. When we delete an account, its journal content, uploaded images, and AI conversations are permanently deleted from our active database, and backups age out within 30 days.
• Usage data: usage events linked to your account are deleted with it. Events recorded before you signed in are tied only to a browser identifier.
• Billing records: as long as tax and accounting law requires, usually seven years.
• Newsletter: until you unsubscribe.
• Support emails: as long as needed to resolve your request and keep a record of it.

9. Cookies, local storage, and privacy signals

Website (www.edgebook.io): the website stores your cookie preference. Google measurement cookies stay off until you accept optional visit and purchase measurement in the cookie banner. Its page-view and speed analytics (Vercel Web Analytics and Speed Insights) use no cookies. Our own usage analytics keep a random identifier in local storage, not in a cookie. If your browser sends a Global Privacy Control signal, we treat it as a decline and do not show the banner. You can change your choice at any time with Cookie settings in the website footer or on the app’s signup and payment-result pages, which also removes Google measurement cookies.

App (app.edgebook.io): the app uses local storage and cookies to keep you signed in, remember your preferences, and run the analytics and error monitoring described in section 5. It shows no ads. Optional Google measurement cookies support the signup and checkout flow only after you accept them; journal screens are not sent as Google page views.

Do Not Track and Global Privacy Control: on the website, a Global Privacy Control or Do Not Track signal blocks Google measurement on the website and in the app. On the website and in the app, our own usage analytics stop recording events when your browser sends Do Not Track or Global Privacy Control. In the app, PostHog also stops for Do Not Track. Error monitoring continues so we can fix problems.

10. Your rights

Depending on where you live, you may have the right to:

To make a request, email alex@edgebook.io from the address on your account. We may ask you to confirm your identity, and we will respond within 30 days, or sooner where the law requires. You can use an authorized agent where your law allows. We will not treat you differently for exercising these rights. If we decline your request, you can reply to ask us to reconsider.

11. Children

The Service is for people 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

12. International transfers

We are based in the United States, and our providers process information in the United States and other countries, including the AI processing in Singapore and mainland China described in section 6. Those countries may have different data protection laws from yours. Where the GDPR or UK GDPR applies, we rely on a provider's certification under the EU-U.S. Data Privacy Framework and its UK extension, or on the Standard Contractual Clauses in our data processing agreements with our providers.

13. Changes to this policy

We will post any change on this page and update the "Last updated" date. If a change is material, we will also tell you by email or in the app before it takes effect.

14. Contact us

Questions about this policy or your information:

Archipelago Ventures, LLC
alex@edgebook.io