Privacy Policy

1. Introduction

ROUTUR, Inc. d/b/a DeriveAI (“we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Important Information

Data Controller

ROUTUR, Inc. d/b/a DeriveAI (a Delaware corporation) is the data controller and responsible for your personal data.

Commitment to Data Protection

We will never sell your personal data. All collected information is used solely to improve platform functionality, user experience, and our AI systems.

3. Information We Collect

Account Information

• Email address
• Username
• Password (encrypted)
• Account preferences

Platform Usage Data

• Trading preferences
• Strategy selections
• Research history
• Watchlist items
• Custom alerts
• Platform interaction patterns

Technical Data

• IP address
• Browser type
• Device information
• Operating system
• Login timestamps
• Feature usage statistics

Communications

• Support inquiries
• Feedback submissions
• Survey responses
• Platform messages

Session Recording

With your consent, we record how pages on our marketing site are used — pages visited, pointer movement, clicks and scrolling — so we can see where the site is confusing. Recordings are made by our analytics provider, PostHog, acting as our processor.

Form fields are excluded. Values you type into any input, textarea or contact form are not captured, and we do not record anything inside the DeriveAI platform itself.

You can decline recording, or withdraw consent at any time, using the cookie settings link in our footer. Declining means the recording software is never loaded.

4. How We Use Your Information

Platform Improvement

• Enhance AI analysis capabilities
• Improve user experience
• Develop new features
• Debug platform issues
• Optimize performance

Service Provision

• Authenticate users
• Process subscriptions
• Provide support
• Send essential notifications
• Maintain account security

Platform Analytics

• Usage patterns analysis
• Feature effectiveness
• Performance monitoring
• Security monitoring

5. Data Protection

Security Measures

• Encryption at rest and in transit
• Regular security audits
• Access controls
• Monitoring systems
• Secure data storage

Data Retention

• Active account data retained until account deletion
• Inactive accounts reviewed after 12 months
• Backup data retained for 30 days
• Usage logs retained for 90 days

6. Your Data Rights

You have the right to:

• Access your data
• Correct inaccurate data
• Request data deletion
• Export your data
• Restrict processing
• Object to processing
• Withdraw consent

7. Information Sharing

We DO NOT:

• Sell your personal data
• Share data with third parties for marketing
• Use data for purposes beyond platform improvement
• Transfer data internationally without protection

We may share data:

• When required by law
• To protect legal rights
• With service providers who assist platform operations
• In event of merger/acquisition (with notice)

8. Cookies and Tracking

We use:

• Essential cookies for platform operation
• Analytics and session recording, only with your consent
• Session cookies for security
• Preference cookies for user settings, such as light or dark mode

Users can:

• Accept or decline analytics and session recording when first visiting the site
• Change that choice at any time through the cookie settings link in our footer
• Clear cookies through browser settings

9. Children’s Privacy

• Platform not intended for users under 18
• We do not knowingly collect data from minors
• Will delete any identified minor’s data
• Parents/guardians should contact us with concerns

10. User Consent

By using DeriveAI, you consent to:

• Data collection as described
• Platform improvement usage
• Essential communications
• Cookie usage as specified

11. Changes to Privacy Policy

We may update this policy:

• With notice via email
• With platform announcement
• Maintaining version history
• Requiring re-consent if substantial changes

12. Contact Information

For privacy concerns:

• Email: privacy@deriveai.co
• Website: deriveai.co/privacy
• Address: 1606 Headway Cir STE 9778 Austin, TX, 78754 US

13. Legal Bases for Processing

We process data based on:

• Contract fulfillment
• Legal obligations
• Legitimate interests
• User consent
• Platform operation requirements

14. International Users

For users outside US:

• Data processed in US
• GDPR compliance where applicable
• Data transfer safeguards in place
• Local law compliance as required

15. Data Breach Procedures

In event of breach:

• Prompt user notification
• Authority notification if required
• Impact assessment
• Remediation actions
• Security improvements

16. California Privacy Rights

California residents have right to:

• Know what data is collected
• Know if data is sold/disclosed
• Opt-out of data sharing
• Access collected data
• Equal service without data sharing

All data collection improves platform functionality only. We emphasize: your data is never sold or shared for commercial purposes.