Last updated: June 19, 2026 | Version: 1.0
This Privacy Policy explains what personal information SODA collects, how we use it, who we share it with, and your rights. It is written to be readable. A licensed attorney review before publishing is recommended.
SODA LLC ("SODA," "we," "us") operates the SODA platform (the "Service"). This policy applies to personal information we process about users of the Service.
Information you provide:
Information from your use of the Service:
Information from connected third parties:
We do not knowingly collect information from anyone under 18.
We use personal information to:
We do not sell your personal information for money. We do not use your individual strategies or trading data to provide advice, to trade on our own behalf, or to train any models — your strategies are yours.
We share personal information only as needed to provide the Service, with providers including:
| Provider | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Billing/subscription data |
| Tastytrade, Alpaca (and brokers you connect) | Trade automation | Account/credential/order data you authorize |
| Polygon.io | Market data | Querying market data (not your personal data) |
| Resend | Transactional email | Email address, message content |
| Cloud infrastructure provider(s) | Hosting the Service | Data stored/processed on our servers |
| Anthropic (for SODA Intelligence) | AI analysis features | The backtest/analysis data you submit to that feature |
Each provider processes data under its own privacy terms. Data sent to Anthropic via SODA Intelligence is processed solely to generate the requested analysis and is not used to train Anthropic's foundational AI models. We may also disclose information to comply with law, enforce our Terms, prevent fraud or harm, or in connection with a business transfer.
Affiliate payouts are handled manually by SODA (for example, by ACH, Wise, or PayPal); we are not currently using a third-party payout processor for affiliate payments.
We use reasonable technical and organizational safeguards to protect personal information. Brokerage credentials and API keys are encrypted in transit and at rest, and access is restricted. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
In the event of a security incident affecting your personal information, we will notify affected users without undue delay and in accordance with applicable law, and will take reasonable steps to investigate and mitigate the incident.
We keep personal information only as long as we need it, and delete or anonymize it when it is no longer required:
| Data type | Retention |
|---|---|
| Account/profile data | Deleted or anonymized after account closure once no longer needed |
| Billing/tax records | Retained ~7 years to meet tax and legal recordkeeping requirements |
| Operational/diagnostic logs | ~90 days |
| Backups | Purged on a rolling cycle (~30 days) |
(Note for build: confirm these periods match SODA's actual system behavior — backup cycle, log rotation — and adjust the stated numbers to the truth before publishing.)
After account closure, we retain only what is necessary for legitimate business and legal purposes (such as the billing/tax records above), after which it is deleted or anonymized.
Depending on where you live, you may have rights to:
To exercise these rights, contact us at [email protected]. We will verify your request and respond within the time required by law.
California residents (CCPA/CPRA): You have the rights described above, the right to know the categories of personal information collected and the purposes, and the right not to be discriminated against for exercising your rights. We do not sell your personal information for monetary consideration. To the extent any data sharing with our providers is considered "sharing" under California law, you may opt out by contacting us at [email protected].
EU/EEA/UK residents (GDPR/UK GDPR): Where applicable, our legal bases for processing are the performance of our contract with you (providing the Service), your consent (where requested), our legitimate interests (securing and improving the Service), and compliance with legal obligations. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local data-protection supervisory authority. To exercise these rights, contact [email protected].
We use cookies and similar technologies necessary to operate the Service (such as keeping you logged in) and, where applicable, to understand usage. Some third-party tools we use (including Stripe) may set their own cookies. You can control cookies through your browser settings, though disabling some may affect functionality. Currently, we do not respond to "Do Not Track" browser signals.
The Service is operated from the United States. If you access it from outside the U.S., you understand your information will be processed in the United States, where data-protection laws may differ from those in your country.
We may update this Privacy Policy. If we make material changes, we will notify you (for example, by email or in-app notice) and update the "Last updated" date and version. Your continued use after changes take effect constitutes acceptance.
Questions about this policy or your data:
[email protected] SODA LLC Charlotte, North Carolina