Privacy Policy
Closed Alpha Draft · Pending Counsel Review
Effective July 13, 2026 · Last updated July 13, 2026
This interim Privacy Policy applies only to Nument Trade's small, invitation-only closed alpha. It has not yet been reviewed or approved by outside counsel and will be replaced or revised before broader availability.
This Privacy Policy explains how Nument Trade, Inc. ("Nument," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use our websites, applications, automated trading software, and related services (collectively, the "Service").
1. Information we collect
1.1 Account and identity information
When you sign in through Google or X, we receive information made available by that provider, such as your name, email address, profile image, provider identifier, and authentication information. We also collect records of your account status, role, legal acceptance, invitations, and communications with us.
We do not ask you to provide a Social Security number, government identification number, date of birth, home address, or payment-card number during the current closed alpha.
1.2 Brokerage and trading information
When you connect or authorize a supported brokerage account, we may collect and process:
- broker and account identifiers, labels, account type, status, and options permissions;
- connection credentials, authorization codes, access tokens, refresh tokens, or secret tokens;
- balances, net liquidation value, cash, buying power, and margin information;
- positions, orders, fills, executions, adjustments, rolls, expirations, and related timestamps;
- strategy selections, contract quantities, routes, controls, and risk settings; and
- derived analytics such as profit and loss, win rate, drawdown, performance, and operational status.
We do not receive or store your broker website password when a broker connection uses OAuth or another token-based authorization flow. Some supported broker connections may require a developer credential or secret token supplied by you.
1.3 Usage, device, and diagnostics information
We and our providers automatically collect limited technical and usage information, which may include:
- pages viewed, links or controls used, feature interactions, and time of access;
- referring page, browser and device type, operating system, IP address, and approximate location derived from IP;
- session and authentication events; and
- application errors, performance traces, request paths, and security or audit logs.
For authenticated users, our product-analytics system may associate a platform user identifier and email address with product usage. We disable session replay, mask captured on-screen text, strip query strings and opaque record identifiers from analytics URLs, and configure error monitoring not to attach default personal information. These controls reduce collection but do not eliminate all technical data.
1.4 Information you submit
We collect information you choose to provide through support messages, feedback, waitlist forms, strategy-building or AI features, and other communications. Do not submit information you do not want us or the providers supporting those features to process.
2. Sources of information
We collect information:
- directly from you;
- from identity providers such as Google and X;
- from brokers you connect or authorize;
- automatically from your browser, device, and use of the Service; and
- from vendors that help us operate, secure, monitor, and improve the Service.
3. How we use information
We use personal information to:
- authenticate you, maintain your account, and provide the Service;
- connect to your broker and submit or monitor authorized orders;
- display accounts, positions, balances, performance, alerts, and history;
- apply your strategy settings and operate safety and risk controls;
- provide support and respond to requests;
- monitor reliability, investigate errors, prevent abuse, and protect security;
- understand feature usage and improve the Service and trading system;
- maintain audit, legal-acceptance, and operational records;
- comply with law, enforce our agreements, and protect rights and safety; and
- communicate about the closed alpha, material policy changes, security, or Service updates.
We may use aggregated or deidentified information for research, analytics, product development, and other lawful purposes. We will not attempt to reidentify information we maintain as deidentified.
4. How we disclose information
We do not sell personal information. We do not use personal information for targeted advertising or share it for cross-context behavioral advertising.
We may disclose information to the following categories of recipients when reasonably necessary:
- Connected brokers. To authenticate requests, retrieve account information, and submit or monitor orders you authorize.
- Identity providers. Google and X help authenticate your account and process sign-in information under their own policies.
- Infrastructure and database providers. Supabase and Vercel host, store, transmit, and operate portions of the Service.
- Analytics and monitoring providers. PostHog, Vercel Analytics, and Sentry help us understand usage, measure performance, detect errors, and protect the Service.
- AI service providers. If you use an AI-assisted feature, providers supporting that feature may process the prompts, content, or account context needed to provide it.
- Professional advisers and business counterparties. Lawyers, accountants, insurers, auditors, financing sources, or transaction counterparties may receive information subject to appropriate duties or safeguards.
- Authorities and protective disclosures. We may disclose information when required by law or when reasonably necessary to protect users, Nument, brokers, providers, or others from fraud, security threats, harm, or illegal activity.
- Corporate transactions. Information may be transferred as part of a financing, merger, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to applicable law.
These recipients process information under their own terms, privacy policies, or agreements with us.
5. Cookies and similar technologies
The Service uses cookies and similar browser storage for authentication, security, OAuth and PKCE flows, preferences such as theme, and analytics. Some are necessary for the Service to function.
Our product analytics is configured to respect supported browser Do Not Track signals. Because we do not sell personal information or use it for targeted advertising, we do not currently offer a separate sale or targeted-advertising opt-out. Other browser privacy controls may affect parts of the Service.
6. Data retention
We retain information for as long as reasonably necessary to provide the Service, operate the closed alpha, comply with law, resolve disputes, enforce agreements, maintain security and audit records, and support legitimate business purposes.
Retention varies by data type. For example:
- account and brokerage connection information is generally kept while your account or connection remains active;
- credentials or tokens are kept while needed to maintain the connection and are removed or invalidated when the applicable connection is revoked or deleted, subject to technical, backup, legal, and audit requirements;
- trading and operational records may be retained after disconnection to reconcile activity, investigate incidents, comply with law, and maintain accurate research or performance records; and
- aggregated or deidentified information may be retained for longer periods.
We will delete or deidentify information when it is no longer reasonably needed, subject to applicable exceptions.
7. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, authenticated connections, transport encryption, database security policies, monitoring, and restricted administrative access.
No method of storage or transmission is completely secure. We cannot guarantee that unauthorized access, loss, misuse, or alteration will never occur. You are responsible for protecting your identity-provider and broker accounts and notifying us promptly of suspected compromise.
8. Your choices and privacy requests
You may:
- review much of your account and trading information in the Service or directly with your broker;
- correct identity information through the identity provider that supplied it;
- pause a strategy or disconnect a supported broker using available controls;
- request access to, correction of, or deletion of personal information;
- request a portable copy of personal information you provided, where applicable; or
- object to or request restriction of certain processing, where applicable.
Submit requests to support@nument.trade. We may need to verify your identity before completing a request. We will respond within the time required by applicable law and may retain information when permitted or required for security, fraud prevention, legal compliance, disputes, or completion of transactions.
If we deny a request, you may email the same address with the subject Privacy Appeal and explain why you believe the decision should be reconsidered. We will not discriminate against you for exercising an applicable privacy right.
Depending on where you live and whether a privacy law applies to Nument, you may have additional rights. California residents can learn about state privacy rights from the California Attorney General. Texas residents can learn about applicable rights from the Texas Attorney General.
9. Children
The Service is not directed to children, and you must be at least 18 to use it. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information, contact us so we can investigate and delete it where appropriate.
10. United States processing
Nument is based in the United States, and our providers may process and store information in the United States and other locations where they operate. If you access the Service from outside the United States, your information may be transferred to a jurisdiction with different data-protection laws.
The closed alpha is not currently offered to residents outside the United States unless Nument expressly approves access.
11. Third-party links and services
The Service may link to or integrate with third-party services. Their privacy practices are governed by their own policies, not this Privacy Policy. Review those policies before providing information to them.
12. Changes to this Privacy Policy
We may update this Privacy Policy as the Service develops. If a change is material, we will provide notice through the Service, by email, or by presenting the updated policy for review. The "Last updated" date indicates when this policy last changed.
13. Contact
Questions, complaints, or privacy requests:
Nument Trade, Inc.