Privacy Policy
1. Overview
This Privacy Policy explains what information Solace LLC ("Solace", "we") collects when you use the service at solacehub.xyz, why we collect it, and what choices you have. We do not sell your personal information.
2. Data We Collect
Account data. Username, display name, salted password hash, email address (when provided), the IP address used at signup, and a timestamp recording your acceptance of these Terms and this Policy.
Trading-integration data. The TopStep / TopStepX login email and API key you supply so the bot can authenticate against your prop-firm account; the NinjaTrader connection credentials you supply for live trading; account identifiers (account number, name) returned by those brokers; and the trade history (orders, fills, P&L, contract counts) generated while the bot operates on those accounts.
Payment data. Cryptocurrency purchase records (currency, amount, derived deposit address, transaction hash, confirmation count) and, for card purchases, a Stripe Checkout session ID and payment intent ID. Solace does not see, store, or have access to your full card number, CVC, or bank credentials — those are handled directly by Stripe.
Referral & affiliate data. Click events on referral links (referral code, IP, path, user-agent, timestamp), redemption records, and accrued credit / commission balances.
Discord-link data. If you opt to link your Discord account, your Discord user ID, Discord username, and any guild / channel IDs you authorize for status notifications.
Server & cookie data. Standard request logs (IP, user-agent, path, status, timestamp). A single first-party session cookie used to keep you signed in. We do not currently use third-party advertising or analytics cookies.
4. Third-Party Sharing
We share the minimum data required for these vendors to perform their function:
- Stripe — card processing. Receives the order amount, plan label, your email (if provided), and a membership ID for reconciliation.
- TopStep / TopStepX — we send your stored TopStep credentials to TopStep's API to authenticate, fetch account balances, and place orders on your account.
- Discord — if you link your Discord account, status updates and account-link confirmations are posted to the channels you authorize.
- Pterodactyl — the panel we use to host your bot instance receives your account directory name and bot configuration so the bot can be deployed.
- Mempool.space / Litecoinspace.org / CoinGecko — public blockchain explorers and price oracles. We send only the destination address and currency to look up balances and confirmations; no personal data is shared.
We do not sell, rent, or trade personal information. We may disclose information when legally required (subpoena, court order, lawful government request) or to protect the rights, property, or safety of Solace, our users, or the public.
5. Data Retention
Account, trading-integration, and payment records are retained for as long as your account is active and for up to seven (7) years after closure to satisfy tax, accounting, and dispute-resolution obligations. Server request logs are retained for ninety (90) days. Referral click logs are retained for two (2) years for fraud review. You may request earlier deletion as described below; we will honor the request except where retention is legally required.
6. Your Rights (CCPA & GDPR)
If you are a California resident, the California Consumer Privacy Act ("CCPA") gives you the right to (a) know what personal information we collect and how it is used, (b) request a copy of that information, (c) request deletion of that information, and (d) not be discriminated against for exercising these rights. We do not sell personal information, so there is no opt-out-of-sale to exercise.
If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation ("GDPR") and UK GDPR give you the right to access, rectify, erase, restrict processing of, port, and object to processing of your personal data, and to lodge a complaint with your local supervisory authority. Our legal basis for processing is contractual necessity (delivering the Service you purchased), legitimate interest (fraud prevention, security), and consent (Discord linking, email contact).
To exercise any of these rights, email [email protected] from the address on your account. We will respond within thirty (30) days.
7. Security
Passwords are stored as salted hashes. Connections to the dashboard are TLS-encrypted. Production secrets are stored in a separate secrets manager and not committed to source. Despite these measures, no system is perfectly secure; if you discover a vulnerability, please email security reports to [email protected].
8. Children
The Service is not directed to anyone under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, contact us and we will delete it.
9. Changes
We will post any changes to this Policy on this page and update the "Last updated" date. Material changes will be communicated by in-dashboard notice or email.
10. Contact
Solace LLC, Irvine, California · [email protected]