1. Introduction
Cena Labs ("we", "us", "our") operates EdgeCast at edgecastai.com (the "Service").
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using EdgeCast you consent to the practices described here.
2. Information We Collect
A) INFORMATION YOU PROVIDE DIRECTLY
- Email address (required for account creation)
- Password (encrypted using industry-standard hashing; never stored in plain text; never accessible to staff)
- Full name (optional, for display purposes)
- Payment information (credit card data processed exclusively by Stripe — we never store or access your card details)
- Telegram chat ID (only if you choose to connect Telegram)
- Discord user ID (only if you use our Discord bot)
- Portfolio positions (only if you manually enter them)
- Wallet addresses (only if you choose to track them)
- Support communications (emails sent to us)
B) INFORMATION COLLECTED AUTOMATICALLY
- IP address and approximate location
- Browser type, version, and settings
- Device type, operating system, and identifiers
- Pages visited, features used, and time spent
- Referring URLs and exit pages
- API request logs and response times
- Error logs and crash reports
- Session data and authentication tokens
C) INFORMATION FROM THIRD PARTIES
- Stripe: subscription status and payment history
- Supabase: authentication and session data
- Polymarket: publicly available market data only
- Vercel: server access logs and performance data
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Process payments and manage subscriptions
- Provide the EdgeCast service and features you request
- Send transactional emails (confirmations, password resets, billing receipts, subscription notifications)
- Send Telegram alerts you have explicitly opted into
- Send Discord bot responses you have requested
- Analyze usage patterns to improve the service
- Debug technical issues and prevent errors
- Detect and prevent fraud, abuse, and security threats
- Comply with legal obligations and enforce our Terms
- Respond to customer support inquiries
- Send product updates (you may opt out at any time)
4. AI Processing of Data
Your market analysis requests are processed by the Anthropic Claude API, operated by Anthropic PBC. We send market questions and context to generate analysis.
Anthropic processes this data per their Privacy Policy available at anthropic.com/privacy. AI conversations may be used by Anthropic to improve their models per their terms of service.
6. Data Retention
- Active account data: retained while your account exists
- After account deletion: personal data removed within 30 days
- Payment records: retained 7 years for legal and tax compliance
- Server and access logs: retained 90 days
- Aggregated anonymous analytics: retained indefinitely
- Backup copies: may persist up to 90 days after deletion
7. Data Security
We implement appropriate technical and organizational measures including:
- TLS/SSL encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- Passwords hashed using bcrypt
- Database access restricted by role-based permissions
- Regular security audits and vulnerability assessments
- Multi-factor authentication for system access
- Intrusion detection and monitoring
8. Your Privacy Rights
ALL USERS
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your account and data
- Portability: Request your data in a portable format
- Opt-out: Unsubscribe from marketing communications
CALIFORNIA RESIDENTS (CCPA)
- Right to know what personal information we collect
- Right to know if personal information is sold or disclosed
- Right to opt out of sale of personal information (we do not sell personal information)
- Right to deletion of personal information
- Right to non-discrimination for exercising your rights
EUROPEAN UNION RESIDENTS (GDPR)
- Right of access to personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Rights related to automated decision making
- Right to lodge a complaint with a supervisory authority
To exercise any rights, contact support@cenalabs.com. We will respond within 30 days.
10. Children's Privacy
EdgeCast is not intended for users under 18 years of age. We do not knowingly collect personal information from minors.
If you believe a minor has provided us with personal information, contact support@cenalabs.com immediately. We will delete such information promptly.
11. International Data Transfers
We are based in the United States.
Your data may be processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence.
By using EdgeCast you consent to the transfer of your information to the United States and other countries.
12. Third Party Links
EdgeCast may contain links to third party websites including Polymarket, Polygonscan, and others. We are not responsible for the privacy practices of third party sites. We encourage you to review their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email and by updating the "Last updated" date at the top of this page. Continued use after changes constitutes acceptance of the updated policy.
14. Contact Us
For privacy questions, requests, or concerns:
Cena Labs
Email: support@cenalabs.com
Email: info@cenalabs.com
Response time: Within 30 days
Last updated: May 2026 · © 2026 Cena Labs · All rights reserved