PoliStock Privacy Policy

Effective: June 25, 2026

At PoliStock Corp. ("PoliStock," "we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services, including the PoliAgents automated trading feature. This Privacy Policy is incorporated into and forms part of our Terms of Service.

Information We Collect

Account Information. When you create an account, we collect information such as your name, email address, and any other information you provide during registration. This information is stored in our database.

Usage Information. We collect information about how you use our Services through Mixpanel, a third-party analytics platform. This includes:

• Pages and features you access
• Time spent on different sections of the Services
• Interactions with our recommendations and analysis tools
• Search queries and preferences
• Device information and browser type

Mixpanel receives this usage data directly and is subject to its own privacy policy. We do not send financial data, brokerage data, or PoliAgents strategy configurations to Mixpanel.

Financial Preferences. We may collect information about your investment interests, risk tolerance, and portfolio preferences to provide personalized recommendations.

PoliAgents Strategy Data. If you use PoliAgents, we collect and store the strategy or thesis you configure for your PoliAgent, your allocated capital amount, your operating mode selection, and any adjustments you make to default security limits. This information is stored in our database and is used to operate the PoliAgent on your behalf.

Brokerage Connection Data. To operate PoliAgents, we store an authentication token provided by your connected brokerage. We do not store your brokerage login credentials. Brokerage account data is retrieved fresh each session and is never written to persistent storage.

Trade Execution Data. We store records of trades executed by your PoliAgent, including trade details, timestamps, strategy context, and execution outcomes. This data is retained to provide you with activity history and to support any disputes or compliance inquiries.

Communication Data. We collect information when you contact us, including support requests, feedback, and any other communications.

Technical Information. We automatically collect certain technical information, including IP addresses, device identifiers, browser information, and usage analytics.

Payment Information. Payment transactions are processed by Stripe. We do not store your full payment card details. We receive and retain limited billing information such as the last four digits of your card, billing address, and transaction history for account management purposes.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Operate PoliAgents on your behalf, including executing trades and managing your configured strategy
• Retrieve and display your brokerage account data during active sessions
• Generate personalized investment recommendations and analysis
• Communicate with you about your account, PoliAgents activity, and our Services
• Analyze usage patterns through Mixpanel to enhance user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Service
• Train and improve our algorithms, models, and recommendation systems using aggregated and individual user data, including strategy configurations, recommendation interactions, and portfolio data, as described further below
• Develop new features and services

Use of Data for Model Training and Improvement

We may use data collected through your use of the Services, including your investment preferences, PoliAgents strategy configurations, interactions with recommendations, and portfolio data, to train, evaluate, and improve our algorithms and machine learning models. This may include using your data in identifiable or de-identified form. We will not use the content of your private communications to train our models without your consent.

If you do not wish your data to be used for model training purposes, you may contact us at contact@polistock.app to opt out. Note that opting out will not affect data we have already used prior to receiving your request.

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

Service Providers. We share information with trusted third-party service providers who assist us in operating our Services. These currently include:

• Supabase, for database storage of account information, preferences, and PoliAgents strategy data. Supabase operates on servers located in the United States.
• Stripe, for payment processing.
• Mixpanel, for usage analytics. Mixpanel receives usage data as described above and does not receive financial or brokerage data.
• Alpaca, Webull, and E*TRADE, as brokerage connectivity partners for PoliAgents. We exchange authentication tokens and trade instructions with these providers solely to operate your PoliAgent.

All service providers are contractually bound to protect your information and may only use it for the purposes for which it was disclosed.

Legal Requirements. We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or that of our users or others.

Business Transfers. If PoliStock is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

Aggregated Data. We may share aggregated, de-identified information that cannot reasonably be used to identify you for research, analytics, or business purposes.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Brokerage authentication tokens are stored with encryption. Session-level brokerage data is held only in memory during active sessions and is never written to persistent storage.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. If you suspect unauthorized access to your account or unauthorized trading activity, please contact us immediately at contact@polistock.app.

Data Retention

We retain your personal information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Upon account closure or subscription cancellation, your data will be retained for 90 days, after which it will be deleted or anonymized. Session-level brokerage cache data is deleted immediately when your session ends. Trade execution records associated with PoliAgents activity may be retained longer where required by applicable law or for dispute resolution purposes.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability. You may request access to the personal information we hold about you and, in some cases, receive a copy in a portable format.

Correction. You may request that we correct inaccurate or incomplete personal information.

Deletion. You may request that we delete your personal information, subject to certain exceptions, including where we are required to retain it by law or for legitimate dispute resolution purposes.

Restriction. You may request that we restrict the processing of your personal information in certain circumstances.

Objection. You may object to certain types of processing of your personal information, including use of your data for model training as described above.

Opt-out of model training. You may opt out of the use of your data for model training purposes by contacting us at contact@polistock.app.

To exercise any of these rights, please contact us at contact@polistock.app. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies, including those used by Mixpanel, to:

• Remember your preferences and settings
• Analyze how you use our Services
• Improve our Services and user experience
• Provide personalized recommendations

You can control cookies through your browser settings, but disabling cookies may affect the functionality of our Services, including analytics features.

Third-Party Services

Our Services integrate with third-party services including brokerage platforms, analytics providers, and payment processors as described in this Privacy Policy. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you use in connection with PoliStock, including your connected brokerage.

International Data Transfers

Our Services are operated in the United States. Our database infrastructure, including Supabase, is hosted on servers located in the United States. If you access our Services from outside the United States, your information will be transferred to and processed in the United States. We will ensure that any such transfers comply with applicable data protection laws and that your information receives adequate protection.

Children's Privacy

Our Services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information we have collected
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at contact@polistock.app with "California Privacy Request" in the subject line.

European Privacy Rights

If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including the rights described in the "Your Rights and Choices" section above. Our legal bases for processing your personal information include performance of a contract (to provide the Services, including PoliAgents), legitimate interests (to improve our Services and train our models), consent (where required), and legal compliance.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services we offer, or applicable law. We will notify you of any material changes by posting the updated Privacy Policy on our website and updating the "Effective" date, and where required, by email. Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Email: contact@polistock.app
• Website: https://www.polistock.app/
• Mail: PoliStock Corp., 2243 Sagamore Parkway West, Apt 211, West Lafayette, IN 47906, United States