Privacy Policy

• Account data. Your email address (how you sign in); when your account was created and when you first signed in; sign-in sessions (a session token stored as a cookie and in our database); and one-time sign-in links, which expire after 10 minutes. If you sign in with Google (when that option is offered), the name, email and profile-picture URL Google shares with us. We may also record that email to your address bounced, or that an account was suspended or closed.
• What you set up in the product. Saved searches and their filters, and preferences such as a default capital amount, transfer cost and time zone.
• Billing data. Your Stripe customer and subscription identifiers, plan, subscription status and paid-through date, and the billing events Stripe sends us. Card details go directly to Stripe; we never see or store them.
• Consent records. When you accepted our Terms, which version, where (sign-in or checkout), and that you confirmed you are 18 or older.
• Audit log. Actions that affect billing or accounts (for example, starting a checkout) are written to an internal audit log that records your email address, your account id, the action and the time.
• Abuse-prevention data. To rate-limit sign-in emails we keep a counter keyed by your email address; to rate-limit the feedback form we keep a counter keyed by your IP address. Both expire automatically after about an hour (removal can take up to a few days).
• Feedback. If you use the feedback form, we receive your message, the page you sent it from, the reply-to email you give us (and your account email if you are signed in) by email. It is not stored in our database.
• Logs. Our hosting infrastructure records requests and errors, which can include your IP address, browser user agent, the URL requested and the time.
• Usage counts. We count visits to the public site without cookies and without building a profile of you (see Cookies below). When a visit starts we also note the website that sent you (its domain only, for example google.com), any campaign tags in the link you followed (utm_source, utm_medium, utm_campaign, utm_content or source), the page you arrived on, and whether your browser looks like an automated program (worked out from its user agent, which we don't keep in this record). This record doesn't include your IP address or any identifier, and we use it only to see which links bring people here.

We do not know your venue account balances, positions or trades, and we do not collect government IDs, financial-account numbers or payment-card numbers.

To sign you in and keep your account secure; to provide the product and remember your searches and settings; to bill your subscription and decide whether you have access; to answer support and feedback; to prevent abuse; to keep records of consent and of account and billing actions; to understand, in aggregate, how the site is used; and to meet legal obligations. We use your email only for sign-in links and service messages about your account or subscription — not for marketing unless you ask for it.

We share personal information only with the service providers that run ArbScout:

• Amazon Web Services (United States): hosting, database, email delivery (SES), file storage (S3), rate-limit storage (DynamoDB), logs and metrics (CloudWatch).
• Stripe: payment processing, subscriptions and the customer billing portal.
• Google: sign-in, only if you choose “Continue with Google” where that option is offered.
• Plausible Analytics: cookieless, aggregate page-view counting on the public site, when enabled. Plausible does not use cookies or build visitor profiles.

We may also send the public rule text of venue markets to Anthropic's API to help compare two markets' resolution rules. That text contains no personal information.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We may disclose information if the law requires it, to protect our rights or users, or as part of a sale or reorganisation of the business.

• A sign-in session cookie and Auth.js security cookies (CSRF protection and callback URL). Strictly necessary; the session lasts up to 30 days.
• A short-lived cookie (one hour) that carries your Terms acceptance from the sign-in form to your new session. Strictly necessary.
• Browser storage on the public site that counts one visit per browsing session: a flag in session storage and the time of your last visit in local storage. It holds no identifier and never leaves your browser. What we receive when a visit starts is described under Usage counts above.

We do not use advertising or cross-site tracking cookies, so there is no cookie banner.

• Account, product and consent data: while your account exists.
• Sign-in links: 10 minutes. Sessions: up to 30 days after last use.
• Rate-limit counters: about an hour.
• Hosting and error logs: about 30 days.
• Billing records: as long as needed for tax, accounting and dispute purposes (generally up to 7 years).
• Audit log: kept as a permanent record of account and billing actions, but on deletion your email in it is replaced with a pseudonym (see below).

You can delete your account yourself at any time from Account → Delete account. You can also ask us to access, correct, export or delete your personal information by emailing privacy@idea-engine.studio from the address on your account. We respond within 45 days, and we honour these requests wherever you live.

What deletion does. We delete your sessions, sign-in links, linked Google account, saved searches, alerts and preferences, and remove your email, name and picture from your account record. The audit log is not deleted — it is our record of what happened — but every occurrence of your email in it is replaced by a pseudonym that does not identify you. Billing records and your Terms acceptance are kept, attached to the de-identified account, for the periods above. You can also cancel your subscription at any time from Billing.

Data is encrypted in transit (HTTPS) and stored with AWS. Sign-in uses single-use, short-lived links rather than passwords, and access to production data is limited to the operator. No system is perfectly secure. If a breach affecting your personal information occurs, we will notify you and any authorities as required by law — for Wisconsin residents, within the period Wis. Stat. § 134.98 requires.

ArbScout is for adults: you must be at least 18 (21 where required). It is not directed to children and we do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

ArbScout is operated from the United States and your information is processed and stored in the United States (AWS us-east-1).

The date at the top shows when this policy last changed. For a material change we will email account holders before it takes effect. See also our Terms of Service.