PRIVACY POLICY

1. Introduction

The Prop Pit LLC ("The Prop Pit," "we," "us," or "our") operates the website the-prop-pit.com, along with the Pit Trader desktop, mobile, and tablet applications, the PitBoss AI assistant, and related services (collectively, the "Services").

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you access or use our Services. By using our Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly when creating an account, purchasing a service, or contacting us:

• Account Information: Full name, email address, phone number, mailing address, date of birth, and country of residence.
• Identity Verification: Government-issued photo identification and proof of address, as required by our compliance procedures.
• Payment Information: Credit/debit card details, cryptocurrency wallet addresses, and billing information. Payment card data is processed by our third-party payment processors and is not stored on our servers.
• Trading Activity: Orders placed, positions held, trade history, account balances, and performance metrics generated through your use of Pit Trader.
• Communications: Messages sent through our support system, Discord server, email correspondence, and any feedback or survey responses you provide.
• NDA and Agreement Data: Electronic signatures, IP addresses at time of signing, and timestamps associated with legal agreements.

2.2 Information Collected Automatically

When you use our Services, we automatically collect certain technical information:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, features used, time spent on pages, click patterns, and navigation paths within our websites and applications.
• Log Data: IP address, access times, referring URLs, and error logs.
• Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS location.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies as described in Section 8 of this policy.

2.3 Information from Third Parties

• Payment Processors: Transaction confirmation, payment status, and fraud screening results from our payment partners.
• Identity Verification Services: Verification results from our KYC (Know Your Customer) service providers.
• Analytics Providers: Aggregated usage data from analytics services such as Google Analytics.

3. How We Use Your Information

We use the information we collect for the following purposes:

4. PitBoss AI & Your Data

PitBoss AI is integrated into the Pit Trader platform and processes certain data to deliver its features:

• Chart Analysis: PitBoss accesses your current chart view (symbol, timeframe, visible price data, and applied indicators) to provide analysis. This data is processed in real-time and is not permanently stored by PitBoss.
• Trade Review: PitBoss accesses your trade history (entries, exits, P&L, timestamps) to generate performance analysis and identify behavioral patterns. This analysis is stored within your account.
• Indicator Conversion: Code you submit for conversion (PineScript, NinjaScript, MQL) is processed to generate equivalent Pit Trader code. Submitted code is not retained after conversion is complete.
• Learning Coach: PitBoss tracks course progress, paper trading performance, and skill assessments to generate personalized recommendations. This data is stored within your education profile.

5. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: Third-party companies that help us operate our Services, including payment processors (Stripe, cryptocurrency payment providers), identity verification services, cloud hosting providers (AWS/GCP), email delivery services, and analytics providers. These providers are contractually obligated to use your data only for the services they perform for us.
• Legal Requirements: When required by law, regulation, legal process, or governmental request, including compliance with anti-money laundering (AML) regulations and tax reporting requirements.
• Safety & Security: To protect the rights, property, or safety of The Prop Pit, our users, or the public, including enforcing our Terms of Service and preventing fraud.
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets. You will be notified via email and/or prominent notice on our website of any change in ownership or use of your personal information.
• With Your Consent: In any other circumstances where you have provided explicit consent.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Active Accounts: Account data is retained for the duration of your account plus 5 years after closure for compliance and audit purposes.
• Trading Records: Trade history and account activity logs are retained for 7 years in accordance with financial record-keeping requirements.
• Payment Records: Transaction records are retained for 7 years for tax and financial compliance.
• Identity Verification Documents: Retained for 5 years after the last interaction with your account, as required by AML regulations.
• Support Communications: Retained for 3 years after resolution.
• Marketing Preferences: Retained until you unsubscribe or request deletion.
• Log & Analytics Data: Retained for up to 26 months in aggregated form.

Upon expiration of the retention period, personal data is securely deleted or anonymized. You may request early deletion of certain data as described in Section 9.

7. Data Security

We implement industry-standard technical and organizational measures to protect your personal information:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.2+ (256-bit encryption). Sensitive data at rest is encrypted using AES-256.
• Access Controls: Employee access to personal data is restricted on a need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Infrastructure: Our services are hosted on enterprise-grade cloud infrastructure with SOC 2 Type II compliance, including redundant storage, automated backups, and DDoS protection.
• Payment Security: Credit card processing is handled by PCI DSS Level 1 compliant payment processors. We do not store complete card numbers on our servers.
• Monitoring: Continuous security monitoring, intrusion detection, and regular vulnerability assessments are performed on all systems.
• Incident Response: We maintain a documented incident response plan. In the event of a data breach affecting your personal information, we will notify you within 72 hours as required by applicable law.

8. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our Services:

You can manage cookie preferences through your browser settings. Disabling essential cookies may impair platform functionality. We honor Do Not Track (DNT) browser signals for analytics and marketing cookies.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a machine-readable copy of your data for transfer to another service.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Objection: Object to processing of your data for direct marketing or based on legitimate interests.
• Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
• Non-Discrimination: Exercise any of these rights without receiving discriminatory treatment.

To exercise any of these rights, contact us at privacy@the-prop-pit.com. We will respond to verified requests within 30 days. We may ask you to verify your identity before processing your request.

10. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected, the sources, the purposes, and the third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Opt Out of Sale: We do not sell personal information. However, if this changes, you will have the right to opt out.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Limit Use of Sensitive Information: You may limit our use of sensitive personal information to what is necessary to provide the Services.

To submit a CCPA request, email privacy@the-prop-pit.com with the subject line "CCPA Request." You may also designate an authorized agent to submit requests on your behalf.

11. International Data Transfers

The Prop Pit is based in the United States. If you access our Services from outside the US, your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For transfers from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms. By using our Services, you consent to the transfer of your information to the United States.

12. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@the-prop-pit.com.

13. Third-Party Links & Services

Our Services may contain links to third-party websites, services, or applications (e.g., Discord, social media platforms, payment providers). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our platform.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• We will update the "Last Updated" date at the top of this page.
• We will notify you by email and/or a prominent notice on our website at least 30 days before the changes take effect.
• For material changes that affect how we use data already collected, we will obtain your consent where required by law.

Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us: