Privacy Policy

1. Who we are

Trade The Hill ("we", "us", "our") is an online platform that aggregates and analyses publicly available United States congressional stock trade disclosures filed under the Stock Trading on Congressional Knowledge Act (STOCK Act). We provide data intelligence tools for retail investors.

For the purposes of the EU General Data Protection Regulation (GDPR) and applicable data protection laws, we are the data controller of your personal data.

Contact: privacy@tradethehill.io

2. What data we collect

2.1 Data you give us directly

• Email address — when you join the waitlist, create an account, or subscribe to our newsletter
• Name — when you create an account (optional)
• Payment information — processed by Stripe. We never see or store your card details directly
• Communications — if you contact us by email, we retain those communications

2.2 Data collected automatically

• IP address — for security, fraud prevention and approximate location
• Browser type and device information — to ensure the site works correctly
• Pages visited and time spent — to improve our product (only with your consent)
• Referral source — how you found us (only with your consent)

2.3 Cookies

We use the following types of cookies:

• Essential cookies — required for the site to function (login sessions, security). These do not require your consent.
• Analytics cookies — help us understand how visitors use the site. We only set these with your explicit consent.
• Preference cookies — remember your settings such as dark/light mode.

You can manage your cookie preferences at any time via our cookie settings panel or by clearing your browser cookies.

3. Why we collect your data (legal basis)

• To provide our service (contract performance) — creating and managing your account, processing payments, sending alerts you have requested
• To send you product updates and the waitlist confirmation (legitimate interest / consent) — we will only email you about Trade The Hill
• To improve our product (legitimate interest) — analysing usage patterns to make the platform better
• To comply with legal obligations — tax records, fraud prevention
• With your consent — analytics cookies, marketing emails beyond product updates

4. How we use your data

• Send you waitlist confirmation and early access notifications
• Send alerts you have configured (e.g. when a stock you watch is traded by Congress)
• Send the weekly congressional trading digest (if you opt in)
• Process your subscription payment via Stripe
• Respond to your support requests
• Detect and prevent fraud or abuse
• Comply with legal requirements

We will never sell your data to third parties. We will never share your data with advertisers.

5. Who we share your data with

We share data only with trusted third-party processors who help us operate the platform:

• Stripe — payment processing (stripe.com/privacy)
• Netlify — website hosting (netlify.com/gdpr-ccpa)
• Mailchimp / ConvertKit — email delivery for newsletters and alerts
• Google Analytics — website analytics (only with your cookie consent)

All processors are bound by data processing agreements and are prohibited from using your data for their own purposes.

6. International data transfers

Some of our third-party processors are based in the United States. Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

7. How long we keep your data

• Waitlist email addresses — until you unsubscribe or request deletion
• Account data — for the duration of your account plus 30 days after deletion
• Payment records — 7 years (legal requirement for accounting purposes)
• Support communications — 2 years
• Analytics data — 14 months (anonymised)

8. Your rights under GDPR

If you are based in the European Economic Area, you have the following rights:

• Right of access — request a copy of all personal data we hold about you
• Right to rectification — correct any inaccurate data we hold
• Right to erasure ("right to be forgotten") — request deletion of your data
• Right to restriction — ask us to pause processing your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — where processing is based on consent, withdraw it at any time
• Right to lodge a complaint — with your national data protection authority (in Romania: ANSPDCP — anspdcp.ro)

To exercise any of these rights, email us at privacy@tradethehill.io. We will respond within 30 days.

9. Data security

We take data security seriously. We implement the following measures:

• All data transmitted over HTTPS (TLS encryption)
• Passwords hashed using industry-standard algorithms (bcrypt)
• Payment data handled exclusively by Stripe — PCI DSS compliant
• Access to personal data restricted to authorised personnel only
• Regular security reviews

In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

10. Children's privacy

Our service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

11. Financial data disclaimer

Trade The Hill aggregates publicly available congressional stock disclosures filed under the STOCK Act. This data is sourced from official US government portals (efts.house.gov and efdsearch.senate.gov). We do not collect, process or store any of your personal financial data, brokerage information or investment portfolio details.

12. Not financial advice

Congressional stock trade disclosures are public information made available under the STOCK Act. Trade The Hill presents this data in an organised format. We make no recommendations to buy, sell or hold any security.

You should not make any investment decision based solely on information obtained from Trade The Hill. Always conduct your own research and consult a qualified financial adviser before making investment decisions. Past performance of any trading pattern or strategy discussed on this platform does not guarantee future results.

You assume full responsibility and risk for any investment decisions you make. Trade The Hill, its owners, employees and affiliates accept no liability for any losses or damages arising from your use of this information.

13. Data accuracy disclaimer

Congressional trade disclosures are filed by members of Congress and their staff and are subject to errors, omissions, amendments and delays. The STOCK Act allows up to 45 days for disclosure after a trade is made. Data on Trade The Hill may therefore be incomplete, delayed or contain inaccuracies.

We make reasonable efforts to present data accurately but we do not warrant that the information on this platform is complete, accurate, current or error-free. We are not responsible for errors or omissions in the underlying source data provided by the US House of Representatives or US Senate.

14. Limitation of liability

To the maximum extent permitted by applicable law:

• Trade The Hill is provided on an "as is" and "as available" basis without warranties of any kind, either express or implied
• We do not warrant that the service will be uninterrupted, error-free or free of harmful components
• Our total liability to you for any claim arising from your use of Trade The Hill shall not exceed the total amount you paid us in the 12 months preceding the claim
• We are not liable for any indirect, incidental, special, consequential or punitive damages, including but not limited to loss of profits, loss of data or financial losses arising from your use of the service
• We are not liable for any investment losses resulting from decisions made based on information provided by Trade The Hill

15. Governing law

This Privacy Policy and any disputes arising from it shall be governed by and construed in accordance with the laws of Romania, without regard to its conflict of law provisions. Any disputes shall be subject to the exclusive jurisdiction of the courts of Romania.

If you are a consumer in the European Union, you may also have the right to bring proceedings in your country of residence.

16. California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to delete — request deletion of your personal information, subject to certain exceptions
• Right to opt out — we do not sell personal information. If this changes, you will have the right to opt out.
• Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights

To exercise your CCPA rights, contact us at privacy@tradethehill.io.

17. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email (if you have an account) and by displaying a notice on our website. The "last updated" date at the top of this page will always reflect the most recent version. Continued use of the platform after changes constitutes acceptance of the updated policy.