Privacy Policy

1. Summary

Coil is built around a simple privacy principle: the parts that matter most to you never touch our servers. There are two pieces to be clear about, and they are deliberately separate.

• The website, coil.trade, is a static marketing site. It has no login, no account system, and no database of users. It exists to describe the product, and it collects only the minimal technical data described below.
• The Coil software is something you download and run yourself on your own macOS machine, inside your own AI agent, against your own brokerage account. Your broker and market-data API keys stay on your device. They are never transmitted to Coil, and the operator of Coil has no ability to see your credentials, your trades, your positions, or your capital.

In other words: we sell you a tool, you run it, and the sensitive material — your keys and your money — stays with you. This policy explains what little we do handle, who the third parties are, and how to reach us.

2. Information we do NOT collect

Because the engine runs locally on your device, there is a large category of data we never receive and never want. Specifically, Coil does not collect, store, transmit, or have access to:

• Your brokerage username, password, API keys, tokens, or any other login credentials.
• Your market-data provider keys or credentials.
• Your trades, orders, fills, open positions, or trade history.
• Your account balances, buying power, capital, or portfolio value.
• Any instruction the engine sends to your broker on your behalf.

All of that lives on your machine and flows directly between your device and your broker or data provider. The operator of Coil is not in that path and cannot observe it.

3. Information collected by the website

The coil.trade website is static and hosted on a content-delivery network. Visiting it involves the small amount of routine technical data that any modern website generates:

• Server and CDN logs. Our host, Cloudflare, processes basic request data — such as your IP address, browser user-agent, the pages requested, and timestamps — for security, abuse prevention, and performance. This is standard infrastructure logging, handled by Cloudflare under its own terms.
• Privacy-respecting analytics. If we use analytics at all, we use a privacy-respecting, aggregate measurement of page visits. We do not build advertising profiles, and we do not sell visitor data.
• No account system. There is no sign-up, login, or user database on coil.trade. We are not storing a profile about you on this site.

4. Payments

When you buy Coil, the checkout, billing, and payment processing are handled by Lemon Squeezy as the merchant of record (payments are powered by Stripe). Your purchase is technically a transaction with Lemon Squeezy, and Lemon Squeezy's own privacy policy and terms apply to the data you enter at checkout.

• What Lemon Squeezy and Stripe handle: your full payment details, including card or other payment-method information, billing address, and any tax information. This data is processed by them, not by Coil.
• What Coil receives: limited order information needed to deliver and support your license — for example, confirmation that a purchase occurred, the product and plan purchased, and the email address you used so we can send your license or download. We do not receive your full card number or complete payment details.

For details on how your checkout and payment data are handled, please refer to Lemon Squeezy's privacy policy and Stripe's privacy policy, which govern that part of the transaction.

5. Email and support

If you email support@coil.trade — for support, billing questions, a refund request, or anything else — we use your message and email address solely to respond to you and to keep a record of the conversation for support and accounting purposes. We do not use support emails for marketing, and we do not sell them.

6. Cookies

The Coil website uses minimal cookies or none at all beyond what our host or the checkout flow strictly require to function (for example, security and fraud-prevention cookies set by Cloudflare or by Lemon Squeezy during checkout). We do not set advertising or cross-site tracking cookies.

7. Third parties

Coil relies on a small set of well-established service providers, each handling a narrow, defined role:

• Cloudflare — hosting and delivery of the static website, plus security and performance.
• Lemon Squeezy — merchant of record, handling checkout, billing, tax, invoicing, and license delivery.
• Stripe — payment processing that powers Lemon Squeezy's checkout.

Each of these providers processes data under its own privacy policy and terms. We do not sell your personal data to anyone.

8. Data retention and your choices

We keep the limited information we do hold — chiefly order records and support correspondence — only as long as needed to provide and support your license, to meet tax and accounting obligations, and to comply with applicable law.

You can email support@coil.trade at any time to ask what data we hold about you, to request a copy, or to ask us to delete information that we are not legally required to retain. Because the Coil engine runs entirely on your own machine, any data the software itself stores locally is under your control and can be removed by you directly on your device.

9. Children

Coil is intended for adults and is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, please contact us so we can address it.

10. Changes to this policy

We may update this Privacy Policy from time to time as the product, our providers, or applicable law evolve. When we make a material change, we will revise the effective date at the top of this page. Your continued use of the website or the software after an update constitutes acceptance of the revised policy.

11. Contact

Questions about this policy, or about privacy and data at Coil generally, can be sent to support@coil.trade. This policy is provided by the operator of Coil and is governed by the law of the jurisdiction in which the operator is established.