Privacy Policy

1. Introduction

EurekaLabs, Inc. ("the Company," "we," "us," or "our") operates eurekahq.org and the EurekaLabs platform (the "Service"). The Service provides low-latency market data streaming and AI-driven order routing infrastructure to quantitative trading firms, hedge funds, and proprietary trading desks. This Privacy Policy explains what information we collect from visitors to eurekahq.org and from firms evaluating or using the Service, how we use it, and the rights you have over it.

We are based at 101 Greenwich Street, Floor 22, New York, NY 10007 and can be reached at [email protected].

This policy is governed by applicable United States federal law, the general privacy laws of New York, and the California Consumer Privacy Act / California Privacy Rights Act as a cross-reference for California residents (see Section 9 below).

2. Information We Collect

2.1 Information You Provide

When trading firms and developers interact with eurekahq.org, we collect information submitted directly, including:

• Contact details (name, email address, phone number) provided through our request-access form, contact form, or direct email;
• Firm information you choose to share (firm name, role, estimated venue count, integration context);
• Technical questions or messages you send through the contact form or to [email protected];
• Account credentials (hashed) when you sign in to the EurekaLabs platform.

2.2 Information Collected Automatically

When you visit eurekahq.org, we automatically collect limited technical information to operate and improve the site:

• IP address and approximate location (city and region level, not street address);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page, and navigation path through the docs and product pages;
• Cookie and similar identifiers (see our Cookie Policy for details).

We do not collect market data, order flow, execution records, or trading activity from visitors to this marketing site. Data processed through the EurekaLabs execution infrastructure itself is governed by the separate data processing terms agreed with each client firm, not this policy.

2.3 We Do Not Knowingly Collect Children's Data

eurekahq.org is a business-to-business platform directed at trading professionals. We do not knowingly collect personal information from individuals under 13. If you believe a minor has provided us information, contact [email protected] and we will delete it promptly.

3. How We Use Information

We use the information we collect to:

• Evaluate and respond to request-access submissions from trading firms;
• Answer technical questions about FIX protocol support, venue connectivity, latency specifications, and integration requirements;
• Operate and maintain eurekahq.org, including the Docs and Pulse sections;
• Send service-related communications (onboarding updates, API status notifications, and material changes to these policies);
• Send marketing communications to contacts who have expressed interest, with opt-out available in every message;
• Detect, investigate, and prevent unauthorised access, fraud, or abuse of the Service;
• Comply with legal obligations under applicable US federal and New York law, including financial regulatory record-keeping requirements applicable to infrastructure providers in the trading industry.

We do not sell personal information for monetary value. We do not use personal information collected on this website to train machine-learning models.

Contact information from firms that become platform clients is governed additionally by the data processing terms in the applicable client agreement.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (hosting infrastructure, email delivery, site analytics) under contractual confidentiality and data-processing terms;
• Legal authorities, when required by applicable law, court order, or to protect the rights, safety, or property of the Company or others;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy continuing to apply.

We do not sell personal information to third parties. We do not share personal information with financial counterparties, trading venues, or data vendors.

5. Cookies and Tracking

We use cookies and similar technologies to operate eurekahq.org, remember your preferences, and measure aggregate usage of the documentation and product pages. For details on specific cookies, their lifetimes, and your choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described in this policy, to comply with legal or accounting obligations, and to resolve disputes or enforce agreements. Specifically:

• Request-access and contact form submissions are retained for up to 36 months to support business development follow-up, consistent with typical B2B sales cycles in institutional trading infrastructure;
• Inactive marketing-list contacts are purged after 24 months of no engagement;
• Server access logs for eurekahq.org are retained for 90 days, then aggregated into anonymous usage statistics.

7. Security

We apply administrative, technical, and physical safeguards designed to protect personal information against unauthorised access, alteration, or disclosure. Measures include TLS encryption in transit for all site and API traffic, restricted-access databases with least-privilege controls, and access logging. We design our security controls with SOC 2 Type II principles in mind, though we have not yet completed a formal SOC 2 audit. No system is perfectly secure and we cannot guarantee absolute security.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access to, correction of, and deletion of personal information we hold about you, as well as the ability to limit certain processing. To make a request, email [email protected] with a description of your request. We will respond within the timeframe required by applicable law.

9. New York Residents

New York does not currently have a comprehensive consumer privacy statute. As a matter of policy, the Company extends the following baseline rights to all United States residents regardless of state of residence.

9.1 Baseline Rights

• Right to Know: request the categories of personal information we have collected about you.
• Right to Delete: request deletion of personal information you have provided.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Marketing: unsubscribe from marketing emails at any time via the link in each marketing message or by emailing [email protected].

9.2 How to Exercise

Email [email protected] with a description of your request and enough information for us to verify your identity (such as the email address you used to contact us). We respond within 45 days.

9.3 Sector-Specific Rights

Trading firms and their personnel may be subject to federal sector laws applicable to financial services, including the Gramm-Leach-Bliley Act (GLBA) and, where applicable, SEC and FINRA recordkeeping regulations. Those laws may provide additional rights and obligations with respect to data covered by them. Nothing in this policy limits rights or obligations under applicable financial-services regulation.

9.4 California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. The Company does not sell personal information and does not share personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date above and, where appropriate, a notice on eurekahq.org. Continued use of the Service following posting of updated terms constitutes acceptance.

11. Contact

Questions, requests, or complaints about this Privacy Policy can be sent to: