1. Information We Collect

1.1 Personal Information You Provide

Email address (account registration or waitlist signup); username and password (encrypted via bcrypt); payment information (processed by Dodo Payments, Inc. acting as Merchant of Record — Era never processes or stores payment card details); subscription tier and billing preferences.

1.2 Investment Data You Create

Watchlist assets, purchase/target prices, portfolio preferences, notification preferences.

1.3 Community Content

Content you post in community features is visible to other registered users. Do not post personal information you do not wish others to see.

1.4 Automatically Collected

IP address, device information, browser type/version, pages visited, session data (analytics cookies require consent).

1.5 Waitlist Data

Emails submitted via the landing page waitlist are stored for launch/feature communications. Unsubscribe any time.

1.6 Restricted Jurisdictions

The Platform is not available in Restricted Jurisdictions (Cuba, Iran, North Korea, Syria, Russia, Belarus, Crimea, and Myanmar). Era does not knowingly collect data from persons in Restricted Jurisdictions. If discovered, data will be deleted and the account terminated.

2. How We Use Your Information

Provide Services (intelligence, watchlists, AI analysis, community); Account Management (authentication, billing via Dodo Payments, trial admin); Communication (service announcements, trial reminders, and with consent promotional emails); Platform Improvement (analytics with consent); Security (fraud prevention); Legal Compliance (regulatory requirements).

3. Legal Basis for Processing

Under the Isle of Man GDPR and LED Implementing Regulations 2018 (and where applicable, UK GDPR and EU GDPR):

• Contract Performance (account, subscription, payment)
• Legitimate Interest (security, improvement)
• Consent (marketing, analytics, waitlist emails)
• Legal Obligation (tax, AML)

4. Third-Party Services and Data Sharing

We do NOT sell your personal information.

4.1 Application Hosting

Emergent (emergent.sh): Application hosting provider. Acts as a data processor on Era's behalf. Your data is stored in the United States (US Central). Emergent provides: encryption of data at rest and in transit, ISO certification, SOC 2 Type 1 certification, and isolated preview environments. Emergent does not sell personal data or use customer data to train AI models without explicit consent. Uses sub-processors including MongoDB Atlas. No formal Data Processing Agreement is currently in place. See Emergent's privacy policy at app.emergent.sh/privacy-policy and terms at app.emergent.sh/terms-of-service.

4.2 Payment Processing

Dodo Payments (dodopayments.com): Merchant of Record. Legal seller of record — handles payment processing, tax compliance, chargebacks, and refunds. PCI-DSS compliant. Era does not process or store payment card details. Privacy: dodopayments.com/privacy-policy.

4.3 AI Providers

• Anthropic (anthropic.com): AI via Claude. Anonymised queries only.
• xAI (x.ai): AI via Grok. Anonymised queries only.
• OpenAI (openai.com): AI analysis. Anonymised queries only.

4.4 Embedded Widgets

TradingView (tradingview.com): Charting/screener widgets. Rendered in your browser, may independently collect data per TradingView's privacy policy. Era does not control this collection.

4.5 Data Sources (API only — no personal data shared)

CoinGecko, FRED, Massive.com, X/Twitter, News API providers.

4.6 Analytics

Google Analytics 4 (GA4): Only with cookie consent. EU-US Data Privacy Framework. Era operates two GA4 data streams: one for the platform (platform.eradigital.ai) and one for the landing page (eradigital.ai). Three conversion events are tracked: registration, trial start, and subscription. Data retention is set to 14 months.

4.7 Google Ads

Google Ads (ads.google.com): Era uses Google Ads for paid advertising. Google Ads uses GCLID (Google Click Identifier) tracking via URL parameters to measure ad click-through and conversion. Cookies set include _gcl_aw (click conversion tracking, 90 days), _gcl_dc (DoubleClick integration, 90 days), and _gac_* (campaign information, 90 days). Covered by EU-US Data Privacy Framework. Opt out at adssettings.google.com. See Google's privacy policy.

4.8 Email Service

Emergent: Transactional and (with consent) marketing emails sent through Emergent's built-in email infrastructure. Customer email communications related to Era's client service workflow may be processed through Google's servers (Gmail). Google encrypts data in transit and at rest. See Google's privacy policy.

5. Your Rights

Under applicable data protection law: Access, Rectification, Erasure (Settings → Privacy → Delete Account), Data Portability (Settings → Privacy → Download My Data), Object, Restrict Processing, Withdraw Consent. Contact privacy@eradigital.ai. Response within 30 days.

6. Data Retention

• Account data: active + 30 days
• Watchlist/portfolio: deleted immediately on deletion
• Community content: may be retained anonymised
• Payment records: 7 years
• Analytics: anonymised after 14 months
• Waitlist emails: until unsubscribe or account creation
• Support: 3 years

7. Data Security

SSL/TLS encryption, bcrypt password hashing, database encryption at rest, regular security audits, role-based access controls, Dodo Payments PCI-DSS compliance. Era does not process or store payment card details.

8. Data Breach Notification

Era will notify the Isle of Man Information Commissioner within 72 hours of becoming aware of a qualifying breach. Where the breach poses high risk, we will notify you directly without undue delay.

9. Cookies

See our Cookie Policy. Essential cookies always active. Analytics require consent. TradingView widgets may set their own cookies. Marketing cookies not currently used.

10. International Data Transfers

Your data is stored in the United States (US Central) via Emergent and its sub-processors. Era has implemented appropriate safeguards:

• Emergent (US): Published security certifications (ISO, SOC 2 Type 1), encryption, data isolation. No formal DPA currently in place.
• Dodo Payments (US): Merchant of Record — processes payment data under its own privacy policy.
• Anthropic, xAI, OpenAI (US): Anonymised data only.
• Google Analytics (US): EU-US Data Privacy Framework.
• Google Ads (US): EU-US Data Privacy Framework. GCLID tracking and conversion measurement cookies.
• Google Gmail (US): EU-US Data Privacy Framework. Customer emails processed through Google's servers. Encryption in transit and at rest.
• TradingView (US): Independent collection via embedded widgets.

You acknowledge that data stored in the United States (US Central) may be subject to the laws of those countries. While Era implements appropriate safeguards, data protection standards may differ from the Isle of Man, UK, or EU. All transfers comply with the Isle of Man GDPR and LED Implementing Regulations 2018 and (where applicable) UK GDPR and EU GDPR.

11. Age Requirement

18+. We do not knowingly collect data from anyone under 18. Contact privacy@eradigital.ai if you believe we have.

12. Changes

Updated periodically. Material changes communicated via email. Continued use constitutes acceptance.

13. Contact and Complaints