Privacy Policy

This policy applies to personal information Boxcar handles through the Services and in related communications. It does not govern a trading platform, payment provider, identity-verification provider, bank, or other third party that processes information under its own privacy notice. We encourage you to review those notices before using a third-party service.

"Personal information" means information that identifies, relates to, describes, or can reasonably be linked with a person or household. It does not include information that has been deidentified or aggregated so that it cannot reasonably identify an individual.

The information we collect depends on how you use the Services and may include:

• Contact and account information, such as your name, email address, telephone number, mailing address, username, and account credentials.
• Eligibility and verification information, such as date of birth, country or state of residence, government-issued identification, taxpayer information, and verification results when reasonably needed for identity, eligibility, fraud prevention, payouts, or legal compliance.
• Purchase and payout records, such as the evaluation selected, price, discounts, transaction status, billing contact information, refund history, payout instructions, and payout status. Payment-card or banking details may be collected directly by the provider that processes a purchase or payout.
• Trading and account activity, such as account and platform identifiers, simulated orders and trades, balances, performance, rule-compliance events, payout requests, account status, and related audit records. If you accept a live-capital arrangement, this may also include brokerage identifiers, live orders and executions, positions, risk settings, and live-account status.
• Communications, including support requests, survey responses, feedback, message contents and attachments, conversation history, and records of communications with Boxcar.
• Device, usage, and diagnostic information, such as IP address, browser and device type, operating system, referring page, pages viewed, access times, approximate location derived from IP, cookie identifiers, and security or error logs.

We collect this information:

• directly from you when you create an account, make a purchase, trade, request a payout, or contact us;
• automatically when you use the Website or other online Services; and
• from service providers and business partners, such as trading platforms, payment and payout processors, identity-verification providers, fraud-prevention services, and, for an accepted live-capital arrangement, designated brokerage or execution providers.

We may use personal information to:

• provide, administer, and support evaluations and simulated funded accounts;
• evaluate eligibility for, onboard, administer, and manage risk for separately offered live-capital accounts;
• create and secure accounts, authenticate users, and maintain account history;
• process purchases, discounts, refunds, payout requests, and related records;
• apply the program rules presented for an account and investigate potential rule violations;
• verify identity and eligibility and prevent fraud, abuse, unauthorized access, and security incidents;
• respond to questions and send transactional, service, security, and policy communications;
• operate, troubleshoot, analyze, protect, and improve the Services;
• maintain financial, tax, accounting, compliance, and business records;
• enforce agreements and establish, exercise, or defend legal claims; and
• send promotional communications where permitted by law. You may unsubscribe from promotional email, but we may still send non-marketing messages about your account or transactions.

We may disclose personal information in the following circumstances:

• Service providers. We may use providers for hosting, security, communications, customer support, payment processing, identity verification, tax administration, market data, trading platform connectivity, brokerage and live execution where applicable, analytics, and payout processing. They may handle information only as needed to perform services for us, subject to their contracts and applicable law.
• Trading platforms and requested integrations. We may exchange account, entitlement, simulated trading, live trading where applicable, and status data with a platform or integration needed to provide a feature you request or an accepted live-capital arrangement.
• Legal and safety purposes. We may disclose information to courts, regulators, law enforcement, counterparties, advisers, or others when we reasonably believe disclosure is necessary to comply with law, protect rights or safety, investigate misuse, collect a debt, or handle a dispute.
• Business transactions. Information may be reviewed or transferred as part of a financing, merger, acquisition, reorganization, bankruptcy, or sale of all or part of the business, subject to applicable law.
• At your direction. We may disclose information when you direct us to do so or give consent.

If Boxcar engages in activity that applicable law defines as a "sale" or "sharing" of personal information or as targeted advertising, we will provide the notices and opt-out choices required by that law.

Boxcar currently uses Help Scout Beacon to provide support on the Website. When Beacon loads or you interact with it, Help Scout may use cookies, browser local storage, or device identifiers and may process browser, device, network, approximate-location, page, and Beacon-activity information. If you send a message, it may also process your email address, message, attachments, and conversation history so Boxcar can respond and preserve support context.

Help Scout processes this information for Boxcar under the applicable service agreement and its own security and privacy commitments. You can learn more in Help Scout's privacy materials.

Boxcar and providers supporting the Services may use cookies, pixels, local storage, software development kits, and similar technologies. These technologies can keep a user signed in, remember preferences, protect accounts, prevent fraud, measure performance, diagnose errors, understand use, and, if offered, measure marketing.

The Help Scout Beacon described above is one such technology. The Website may also use first-party local storage to manage the support identity associated with a signed-in user when that feature is enabled.

If you allow analytics, Boxcar uses Google Analytics to understand visits, pages viewed, and navigation through the Website. Google may process device, browser, usage, page, and cookie information to provide that service. Google Analytics remains off until you allow it through the analytics preference notice. We remember your choice in first-party local storage, and you can review or change it at any time through the Cookie preferences control available on the Website. Learn more in Google's Privacy Policy.

You can control many cookies through your browser. Blocking necessary cookies may prevent account, checkout, or security features from working. Where law requires consent for a nonessential technology, Boxcar will request that consent and provide an applicable choice mechanism before using it.

We retain personal information for as long as reasonably necessary for the purposes described in this policy. Retention depends on the type of information, the length of the customer relationship, fraud-prevention needs, dispute and limitation periods, and tax, accounting, legal, and compliance obligations. When information is no longer needed, we take reasonable steps to delete or deidentify it, unless law permits or requires longer retention.

We use administrative, technical, and organizational safeguards designed to protect personal information. No method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for protecting your credentials and for notifying us promptly if you suspect unauthorized account access.

Depending on where you live and subject to legal exceptions, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information. You may also have rights to opt out of certain sales, sharing, targeted advertising, or profiling; to limit certain uses of sensitive information; to withdraw consent; or to appeal a denied request.

To make a request, email us at support@boxcartrading.com. Describe the request and the jurisdiction in which you live. We may take reasonable steps to verify your identity and authority before acting. An authorized agent may submit a request where permitted by law. We will not unlawfully discriminate against you for exercising a privacy right.

You can opt out of promotional email by using the unsubscribe link in that message. This will not stop account, security, purchase, payout, or other non-marketing communications.

The Services are intended for adults who are at least 18 years old and have legal capacity to enter a contract. We do not knowingly offer the Services to children. If you believe a child has provided personal information contrary to this restriction, contact us so we can review and address the matter.

Boxcar is based in the United States. If you access the Services from another country, your information may be transferred to and processed in the United States and other locations where Boxcar's providers operate. Those locations may have privacy laws different from the laws where you live. Availability of a Website page does not mean every Boxcar program is offered in every jurisdiction.

We may update this policy as the Services, our practices, or legal requirements change. We will post the updated policy with a revised effective date and provide any additional notice required by law.

Questions, complaints, and privacy requests may be sent to Boxcar Trading Group LLC by email at support@boxcartrading.com.