Privacy Policy
Last updated: April 2026
1. Who we are
Arbitrage AI is a UK-based software service. We operate this platform at arbitrage-ai.co.uk. References to "we", "us", or "our" in this policy refer to Arbitrage AI.
2. What data we collect
We collect the following categories of personal data:
- Account data: Name, email address, hashed password (or OAuth tokens if you sign in via Google)
- Usage data: Auction lots scanned, lots saved, profit tracking entries, and feature usage patterns
- Payment data: Billing is processed by Stripe. We store only your Stripe customer ID — not card numbers
- Communications: Support messages you send us
3. How we use your data
- To provide the platform services described in our Terms of Service
- To send product-related email alerts you have opted into
- To process payments via Stripe
- To improve the platform through anonymised usage analytics
4. Your rights (UK GDPR)
As a UK user, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Object to processing or restrict processing in certain circumstances
- Data portability (export of your data in a machine-readable format)
To exercise any of these rights, contact us at privacy@arbitrage-ai.co.uk.
5. Data retention
We retain account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g. financial records).
6. Third-party services
7. Cookies
We use strictly necessary cookies for session management (NextAuth.js). We do not use advertising or tracking cookies. Analytics, if used, will be privacy-preserving and cookie-free.
8. Contact
For privacy questions: privacy@arbitrage-ai.co.uk