Privacy Policy

1. Introduction and Controller

This Privacy Policy describes how Acubic, Inc. ("we", "our", "us") collects, uses, and discloses personal data when you use the Acubic website and algorithmic portfolio builder (the "Platform"). Acubic, Inc. is a Delaware corporation, file number 10686560, with registered office at 16192 Coastal Highway, Lewes, DE 19958, United States, and is the controller of the personal data described here. For privacy questions, contact [email protected].

2. Information We Collect

We collect information directly from you, automatically from your use of the Platform, and from service providers when needed to provide the service.

• Identifiers: username, email address, password hash, IP address, user agent, authentication identifiers.
• Financial & Portfolio Data: In-app settings, saved portfolios, and algorithmic preferences that you manually input.
• Usage and Security Data: feature usage, quota events, support events, source endpoints, timestamps, rate-limit and security logs.
• Payment Data: Stripe customer and subscription identifiers. Stripe processes payment card data; we do not store full card numbers.
• Cookie and Consent Data: consent category choices, policy versions, timestamp, region mode, and Global Privacy Control status. See our Cookie Policy.

3. Purposes and Legal Bases

We use personal data to:

• Operating, maintaining, and providing features of the Platform.
• Generate, save, monitor, and optimize portfolios at your request.
• Communicate with you regarding authentication, support, billing, and service updates.
• Protecting the integrity of the Platform by monitoring for unauthorized access and fraud.
• Administer subscriptions, quotas, and payment-related support.
• Comply with legal obligations and enforce our Terms.

For GDPR and UK GDPR purposes, we rely on contract necessity to provide the Platform and administer your account, legitimate interests for security monitoring and service administration, legal obligation where a law requires the processing, and your consent for non-essential cookies and marketing technologies. You can withdraw consent at any time through Cookie Settings without affecting processing already carried out.

4. Sharing and Processors

We do not currently sell personal data or share it for cross-context behavioral advertising. We may disclose personal data to service providers that help operate the Platform, including cloud hosting, database infrastructure, email delivery, payment processing, bot prevention, authentication, support, and market-data services.

We may also disclose information when required by law, to protect rights and security, or in connection with a corporate transaction. Our service providers are located in the United States and the European Economic Area. Where personal data is transferred out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses, together with the UK Addendum where applicable. To request the current list of processors, contact [email protected].

5. Retention and Security

We retain personal data only as long as reasonably needed for the Platform, account management, billing, security, legal compliance, dispute resolution, and backup integrity. Account and portfolio data is retained while your account is active and deleted on request or after the account is closed, except where a longer period is required for billing records, legal compliance, or the defence of legal claims.

We use technical and organizational safeguards designed to protect personal data, including HttpOnly refresh-token cookies, access controls, rate limiting, audit logs, and secure transport in production. No service can guarantee absolute security.

6. Your Rights

Depending on your region, you may have rights to access, delete, correct, port, restrict, object to, or withdraw consent for personal data processing. You may also have rights to opt out of sale, sharing, targeted advertising, certain profiling, and certain sensitive-data processing, plus a right not to be discriminated against for exercising privacy rights.

You can manage cookies and opt-outs through Cookie Settings in the footer. We honor Global Privacy Control as an opt-out of sale/sharing and targeted advertising for applicable US jurisdictions. To submit a privacy request, contact [email protected]. If we decline your request, you may appeal by replying to our decision at the same address, and we will respond with the outcome and our reasons. Residents of the EEA and the UK may also lodge a complaint with their local supervisory authority.

7. Children, Automated Decisions, and Updates

The Platform is not intended for children under 18. The Platform provides algorithmic portfolio modeling outputs for informational and computational purposes, but does not make legally binding or similarly significant automated decisions about you. We will update this Policy when our practices materially change.

8. Contact Information

For questions concerning this privacy policy, please contact us at: