Privacy Policy

1. Introduction

The Exchange ("we," "our," or "us") operates https://theexchange.cash and respects your privacy. This Privacy Policy describes how we collect, use, and protect your information when you use our website and services, including when you register or sign in with Google.

2. Information We Collect

We may collect the following types of information:

• Account information: email address, display name, and password (stored in encrypted form) when you register with email.
• Google Sign-In: if you choose to register or sign in with Google, we receive your Google account email address, name, and basic profile information from Google. We use this only to authenticate you and create or link your Exchange account. We do not request access to your Google contacts, Gmail, Drive, Calendar, or other Google data beyond basic profile and email scopes required for sign-in.
• Phone number: if you provide it and consent to receive text messages (e.g., board move notifications).
• Payment-related information: when you join a paid board, payment processing is handled by Stripe. We may store a Stripe customer identifier and payment transaction references; we do not store full credit card numbers.
• Usage data: how you use the site (e.g., boards you join, participation) to operate and improve our services.
• Technical data: IP address, browser type, and similar data that may be logged by our servers or visitor session tracking.

3. How We Use Your Information

We use your information to:

• Provide and maintain the bracket board and related features.
• Send you emails (e.g., board placement confirmations) and, with your consent, text messages (e.g., when you move up on a board).
• Authenticate your account and communicate with you about your account or our services.
• Comply with applicable law and protect our rights and the security of our systems.

4. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and operate the site. You can control cookies through your browser settings; disabling them may limit some features.

5. Third-Party Services

We use third-party services that process your information under their own privacy policies, including:

• Google — when you use Google Sign-In (see Google's privacy policy at policies.google.com/privacy).
• Stripe — for payment processing when you join paid boards.
• Email and SMS providers — for transactional email and optional text message notifications.

We do not sell your personal information to third parties.

6. Data Retention and Security

We retain your information for as long as your account is active or as needed to provide services and comply with legal obligations. We implement reasonable technical and organizational measures to protect your data; no system is completely secure.

7. Your Rights

You can update your profile (including email, display name, phone number, SMS consent, and account closure) from your account settings at https://theexchange.cash/Account/Manage. To exercise other rights or ask questions, contact us using the details below.

8. Children

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Your continued use of the site after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us through the website at https://theexchange.cash or refer to the contact information in our Terms and Conditions.