TERMS OF SERVICE — HypaValley

Last Updated: 03/21/2026

Welcome to HypaValley (“HypaValley,” “we,” “our,” or “us”). These Terms of Service (“Terms”) govern your access to and use of the HypaValley website, applications, APIs, tools, and related services (collectively, the “Service”). By creating an account, accessing, or using the Service, you agree to these Terms. If you do not agree, do not use the Service.

Definitions

• Content includes text, software, code, features, designs, graphics, interfaces, and documentation provided by HypaValley.
• User Content includes strategies, blocks, configurations, JSON specifications, scripts, code, prompts, notes, labels, uploads, and any other materials you submit or generate through the Service.
• Broker means a third-party brokerage or trading venue you connect (e.g., Alpaca Markets).
• Live Trading means submitting orders intended for execution in a real-money brokerage account.

Overview of the Service

HypaValley provides tools that may allow users to:

• Build algorithmic trading strategies using a visual builder and/or other interfaces
• Generate and store normalized strategy specifications (including JSON or similar representations)
• Generate code (including Python or other languages) from strategy specifications
• Run simulations, backtests, and paper-trading scenarios
• Connect a brokerage account via an authorization flow (e.g., OAuth) to enable Live Trading
• View portfolios, positions, orders, executions, logs, charts, alerts, and other analytics derived from user inputs and/or Broker-provided data

HypaValley is not a broker-dealer, investment adviser, commodity trading advisor, financial institution, exchange, or escrow service. HypaValley does not execute trades itself; Live Trading occurs through your connected Broker, subject to that Broker’s terms, policies, and approvals.

Eligibility; Children

• Minimum Age. The Service is intended for users 13 years of age or older. If you are under 18, you represent that you have permission from a parent or legal guardian to use the Service.
• Live Trading Age Requirement. To enable Live Trading, you must be 18 years or older (or the age of majority in your jurisdiction) and meet your Broker’s eligibility, KYC/AML, and account approval requirements.
• No Use by Children Under 13. If you are under 13, do not use the Service and do not provide personal information.

Account Registration and Security

• Account Accuracy. You agree to provide accurate information and keep it up to date.
• Credentials. You are responsible for maintaining the confidentiality of your login credentials and for all activity under your account.
• Electronic Communications. By using the Service, you consent to receive electronic communications from us (e.g., transactional emails, security notices, confirmations). Marketing emails (if offered) will include opt-out mechanisms.

No Financial Advice; No Fiduciary Duty

The Service is provided for technical, educational, and informational purposes only. HypaValley does not provide financial, investment, legal, tax, or accounting advice, and nothing on the Service is a recommendation, endorsement, or solicitation to buy or sell any security or financial product. You are solely responsible for determining whether any strategy, trade, or transaction is appropriate for you.

Trading Risks; No Performance Guarantees

Trading involves substantial risk, including the potential loss of all invested funds. Algorithmic trading can amplify losses. You acknowledge and agree that:

• Backtests, simulations, and paper trading results are hypothetical and may not reflect actual market conditions.
• Live execution outcomes may differ due to latency, slippage, spreads, partial fills, market impact, order type behavior, trading halts, short sale restrictions, liquidity constraints, outages, or Broker-specific rules.
• The Service may experience delays, errors, data gaps, downtime, or other technical issues.
• HypaValley does not guarantee performance, profitability, fill quality, best execution, availability, or accuracy.
• You assume all risk for Live Trading, including losses arising from misconfiguration, unintended orders, software bugs, data issues, or Service errors.

Live Trading is at your own risk. You are solely responsible for reviewing, testing, and monitoring your strategies, settings, and orders. HypaValley is not responsible for trading losses, unintended orders, or damages caused by app errors or outages.

NO GUARANTEES; NO RESPONSIBILITY FOR ERRORS. YOU ACKNOWLEDGE THAT SYSTEM ERRORS, SOFTWARE BUGS, UNEXPECTED BEHAVIOR, OR THIRD-PARTY SERVICE ISSUES MAY OCCUR AND MAY RESULT IN LOSSES. YOU ACCEPT ALL SUCH RISKS AND RELEASE HYPAVALLEY FROM LIABILITY FOR ANY RESULTING DAMAGES.

Broker Connectivity and Third-Party Services

• Authorization. If you connect a Broker account, you authorize the Service to access permitted account data and submit order instructions only within the scope you approve through the Broker’s authorization mechanism (e.g., OAuth).
• Broker Terms Govern. Your Broker’s terms, disclosures, and policies apply to your brokerage account and all trading activity. HypaValley is not responsible for Broker decisions, compliance determinations, account approvals/closures, margin calls, fees, routing, execution, settlement, or Broker outages.
• No Broker Affiliation. References to third parties do not imply partnership or endorsement unless explicitly stated.

Delegated authorization. HypaValley uses broker-provided delegated authorization (e.g., OAuth) where supported. We do not accept or store broker API keys/secrets or broker passwords. Available authorization methods may change over time and may vary by broker.

Strategy Generation, Code Generation, and Automation Acknowledgements

• User Control. You are responsible for reviewing your strategies, parameters, code, and settings (including symbols, quantities, order types, time-in-force, risk limits, schedules, and safeguards) before enabling paper trading or Live Trading.
• Generated Output May Be Incorrect. Any generated code, strategy specification, analytics, or explanations may contain errors or omissions and may not be suitable for Live Trading without independent validation.
• No Duty to Monitor. HypaValley does not monitor your strategies for suitability, compliance, or correctness and has no obligation to warn you of potential losses or errors.
• Use at Your Own Risk. You assume all responsibility and liability for the strategies you deploy and the trades they place.

User Responsibilities and Acceptable Use

You agree to use the Service lawfully and not to:

• Interfere with or disrupt the Service (including by attempting to overload, probe, scan, or test vulnerabilities).
• Reverse engineer, decompile, or attempt to access non-public APIs, source code, or systems (except to the extent such restriction is prohibited by law).
• Circumvent rate limits, access controls, paywalls, or security features.
• Use the Service to violate Broker rules, market data licensing terms, or applicable laws (including securities laws).
• Upload malicious code, malware, or harmful content.
• Infringe intellectual property rights or misappropriate trade secrets.
• Resell access to the Service or provide it to third parties as a service bureau without our written permission.

We may investigate and take action in our discretion, including suspension/termination, if we believe you violated these Terms.

Market Data and Third-Party Data

Market data displayed in the Service may be provided by your Broker and/or third-party providers. Data may be delayed, incomplete, or inaccurate. You may not redistribute, resell, or otherwise use market data except as permitted by your Broker/provider agreements.

Fees, Free Trials, Billing, Auto-Renewal, and Refunds

• Paid Plans; Stripe Payments. Certain features require payment (including subscriptions and premium tiers such as “Pro” and “Founders Club”). Pro and Founders Club may be offered on monthly and yearly terms as disclosed at checkout. Payments are processed by Stripe (our payment processor). By purchasing a paid plan, you authorize us (and Stripe) to charge your selected payment method for applicable fees, taxes, and other charges described at checkout. HypaValley does not store full payment card numbers; Stripe may store and process your payment information pursuant to its terms and privacy policy.
• Free Trial Requires Payment Method. If you enroll in a free trial, you must provide a valid payment method. Unless you cancel before the trial ends, your trial will automatically convert to a paid subscription at the end of the trial period and your payment method will be charged the applicable subscription fee plus any taxes. If you cancel during the trial, you will not be charged and access ends at the trial end.
• Auto-Renewal; User Controls. Subscriptions may renew automatically at the end of each billing period if auto-renew is enabled. You can enable/disable auto-renew in your account settings (if available) or otherwise through the cancellation controls we provide. If auto-renew is enabled, you authorize recurring charges each billing period until you cancel or disable auto-renew. If auto-renew is disabled, your subscription will remain active until the end of the current paid period and will not renew.
• Cancellation Effective Date; Access Through Period End. If you cancel a subscription or disable auto-renew, your cancellation will take effect at the end of your then-current billing period (or subscription month, as applicable). You will generally retain access to paid features until that time. Canceling stops future renewals; it does not retroactively refund charges already paid for the current period, except as expressly stated in Refunds or as required by law. If you cancel during a free trial, access ends at the trial end.
• Price Changes. We may change prices, plan features, or billing terms from time to time. We will provide notice where required by law. Any changes will apply prospectively for your next billing cycle (or as otherwise disclosed).
• Refund Policy.
  • Monthly Plans — No Refunds. Monthly Pro and Founders Club subscription fees are non-refundable, including for partial months/periods, unused time, downgrades, plan changes, cancellations, or account inactivity, except where required by law.
  • Yearly Plans — Prorated Refunds (Annual Prepay; Monthly Proration; Limited). Pro and Founders Club yearly plans are annual prepaid subscriptions. If you cancel a yearly plan, cancellation is effective at the end of your then-current subscription month, and you will retain access to paid features until that time. We may provide a prorated refund subject to: monthly (not daily) proration; unused full months only after the cancellation effective date; current month not refundable; “subscription month” is each monthly period from your start date; refunds go to the original payment method; exclusions include taxes/fees/chargebacks/outstanding usage; we may deny refunds for fraud/abuse/violations; legal requirements always apply. Proration is calculated at fixed monthly rates of $2.99 (Pro) and $9.99 (Founders Club). Refunds are limited to the amount paid and may be $0 once the fixed monthly rate has fully exhausted the annual price.
• Failed Payments; Suspension. If a payment fails or your payment method is invalid/expired, we may retry the charge, request updated payment information, and/or suspend or downgrade your access until payment is received.
• Chargebacks. Initiating a chargeback without first contacting us to resolve a billing dispute may result in suspension or termination.

Intellectual Property

• Our IP. HypaValley and its licensors own all rights in the Service and Content.
• License to You. Subject to these Terms, we grant you a limited, revocable, non-exclusive, non-transferable license to use the Service for your personal or internal business use.
• Feedback. If you provide feedback, you grant HypaValley the right to use it without restriction or compensation.

User Content; License; Responsibility

• Ownership. You retain ownership of your User Content.
• License to HypaValley. You grant HypaValley a non-exclusive, worldwide, royalty-free license to host, store, reproduce, process, display (to you), execute (on your behalf), translate, and generate derivative representations (e.g., strategy-to-code conversion) of your User Content as necessary to provide, maintain, and improve the Service.
• Anonymized/Aggregated Use. We may use anonymized and/or aggregated data derived from usage and User Content to improve the Service, provided it does not identify you.
• Your Responsibility. You represent that you have the necessary rights to submit User Content and that it does not violate law or third-party rights.

Copyright Complaints

If you believe content on the Service infringes your copyright, contact support@hypavalley.com with sufficient details to identify the work and the allegedly infringing material.

Termination; Suspension; Account Closure and Data Deletion

• Stopping Use; Closing Paid Plans. You may stop using the Service at any time. If you have a paid subscription, you are responsible for canceling or disabling auto-renew to avoid future charges.
• Account Deletion Not Offered as a Standard Feature. At this time, HypaValley does not offer self-service account deletion and does not guarantee deletion upon request. We may, in our discretion, honor certain deletion requests case-by-case, subject to legal, security, fraud-prevention, operational, and backup retention requirements.
• Data Retention After Account Closure. We may retain account information, User Content, and related logs for legitimate business purposes (including security, dispute resolution, fraud prevention, and compliance) and as described in our Privacy Policy.
• Broker Disconnect; Token Revocation. If you disconnect a Broker integration or your authorization expires, we will stop using the authorization and may delete or invalidate stored tokens consistent with our security practices.
• Termination or Suspension by Us. We may suspend or terminate access at any time, with or without notice, if we believe you violated these Terms, created risk for HypaValley or others, or if required for legal, compliance, or security reasons.
• Effect of Termination. Upon termination, your right to use the Service ends. Sections that by their nature should survive termination will survive, including intellectual property, disclaimers, limitation of liability, and indemnification.

Disclaimers

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE MAXIMUM EXTENT PERMITTED BY LAW, HYPAVALLEY DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, AND AVAILABILITY. YOU USE THE SERVICE AND LIVE TRADING FEATURES AT YOUR SOLE RISK. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE.

Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW: (a) HYPAVALLEY WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, INCLUDING TRADING LOSSES OR DAMAGES ARISING FROM ORDERS, EXECUTION, OR SERVICE ERRORS; AND (b) HYPAVALLEY’S TOTAL LIABILITY FOR ANY CLAIM WILL NOT EXCEED THE AMOUNTS YOU PAID TO HYPAVALLEY FOR THE SERVICE IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM (OR, IF YOU PAID NOTHING, $100).

Indemnification

You agree to defend, indemnify, and hold harmless HypaValley and its officers, directors, employees, and agents from any claims, liabilities, damages, losses, and expenses (including reasonable attorneys’ fees) arising from your use of the Service, your User Content, or your violation of these Terms or applicable law.

Governing Law; Venue

These Terms are governed by the laws of the State of California, without regard to conflict-of-law principles. Any dispute arising from these Terms or the Service will be brought in the state or federal courts located in Santa Clara County, California, and you consent to their jurisdiction and venue.

Changes to the Terms

We may update these Terms from time to time. Changes are effective when posted. Continued use after posting constitutes acceptance.

Contact

Questions or support: support@hypavalley.com

---

PRIVACY POLICY — HypaValley

Last Updated: 03/21/2026

This Privacy Policy explains how HypaValley (“HypaValley,” “we,” “our,” or “us”) collects, uses, shares, and protects information when you use the Service.

Information We Collect

1.1 Account Information

• Email address
• Login credentials (stored in hashed form)
• Optional profile information and preferences

1.2 Strategy and Trading-Related Information

• Strategy definitions (e.g., blocks/configs), normalized specifications (e.g., JSON), generated code
• Backtest/paper results and logs
• If you enable Live Trading: Broker-sourced data such as account status, positions, orders, and executions as permitted by your authorization

1.3 Usage, Device, and Log Data

IP address, device/browser type, pages visited, timestamps, feature interactions, error logs, and performance metrics.

1.4 Broker Authorization Data (e.g., OAuth)

Authorization tokens/credentials needed to maintain Broker connectivity (as applicable). We do not collect or store your SSN, government ID, bank account numbers, or Broker login password.

How We Use Information

We use information to provide and operate the Service; authenticate users and maintain account security; run backtests/paper trading and, if enabled, submit order instructions to your Broker; provide support; troubleshoot issues; improve reliability; communicate transactional messages; enforce our Terms; and comply with legal obligations. We do not sell your personal information.

How We Share Information

• Broker Integrations. If you connect a brokerage account, we share and receive information with/from your Broker as necessary to provide the authorized features. Your Broker’s policies govern how the Broker handles your brokerage data.
• Payment Processing (Stripe). Payments are processed by Stripe. Stripe may collect and process your payment information (such as card details and billing address) under its own terms and privacy policy. HypaValley typically receives limited payment metadata from Stripe (e.g., payment status and subscription state) to manage subscriptions and support.
• Service Providers. We may share information with vendors that help us operate the Service (hosting, analytics, customer support, monitoring). They may access information only to perform services for us and must protect it.
• Legal and Safety. We may disclose information if required by law or if we believe disclosure is necessary to protect rights, safety, or security, investigate fraud, or enforce our Terms.
• Business Transfers. If we undergo a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to applicable law.

Cookies and Analytics

We may use cookies or similar technologies to operate sessions, remember preferences, and understand usage. You can control cookies through browser settings, but the Service may not function properly without certain cookies.

Data Retention

• General Retention. We retain information as long as necessary to provide the Service and for legitimate business purposes such as security, fraud prevention, dispute resolution, and legal compliance.
• No Standard Account Deletion. HypaValley does not offer self-service account deletion and does not guarantee deletion upon request. In some cases, we may honor deletion requests in our discretion and subject to legal and operational constraints.
• Backups. Information may remain in encrypted backups for a limited period until overwritten as part of our backup rotation.
• Broker Authorization Tokens. If you revoke access or disconnect your Broker integration, we will stop using the authorization and may delete or invalidate stored tokens consistent with our security practices.

Security

We implement commercially reasonable administrative, technical, and organizational safeguards to protect information. No system is completely secure; you are responsible for using strong passwords and protecting your devices.

Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we collected such information, we will take steps to delete it.

Your Choices and Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing. To submit a request, contact support@hypavalley.com. California residents may have additional rights under CCPA/CPRA. HypaValley does not sell personal information and does not share it for cross-context behavioral advertising.

International Users

If you access the Service from outside the United States, you understand your information may be processed in the United States where data protection laws may differ.

Changes

We may update this Privacy Policy from time to time. Changes are effective when posted.

Contact

Privacy questions: support@hypavalley.com

---

SECURITY & DATA HANDLING STATEMENT — HypaValley

Last Updated: 03/21/2026

HypaValley is committed to protecting user data and maintaining secure broker integrations. This Security & Data Handling Statement summarizes how HypaValley processes, stores, and protects information.

1. System Architecture

HypaValley operates a backend service that:

• Receives strategy instructions
• Executes API calls to your connected Broker
• Processes webhook updates from Broker integrations
• Stores user strategies and logs
• Stores broker authorization tokens securely (where applicable)

All sensitive operations occur server-side, never in the browser.

2. OAuth Token Handling

HypaValley uses broker-provided OAuth or delegated authorization where available. We never request Broker usernames/passwords or store Broker API keys or secrets.

• Tokens are stored encrypted in secure database fields and restricted to backend trading services.
• Tokens are never shared outside HypaValley systems.

Token revocation: Users may revoke access anytime via their Broker dashboard or HypaValley settings. Upon revocation, tokens are deleted and active sessions invalidated.

3. Data Storage

Stored: user email & hashed password, strategies (blocks/JSON/Python), trading logs, paper results, encrypted OAuth tokens, execution event logs.

Not stored: SSN, government ID, bank information, Broker passwords, Broker API keys, or sensitive financial identity data.

4. Encryption & API Security

HTTPS required for all endpoints; TLS 1.2+ enforced. Tokens are encrypted (AES or equivalent). API rate-limits apply. Sensitive endpoints require authentication and authorization.

5. Market Data Handling

HypaValley does not redistribute market data. Data shown comes directly from your Broker and/or market data providers, restricted to the authenticated user’s session. We do not store or resell market data.

6. Access Controls

Production servers use RBAC, least privilege, privileged-action logging, and MFA for administrators. Developers do not access live account data unless strictly necessary.

7. Data Backups

Encrypted backups are maintained on secure systems and rotate/purge automatically per retention rules.

8. Incident Response

If a data breach or security incident occurs, access is restricted, affected tokens are revoked, the incident is logged/investigated, users and relevant Brokers are notified where required, and remediation steps executed.

9. Compliance & Regulations

HypaValley adheres to applicable laws and Broker requirements, including U.S. data protection standards, CCPA where applicable, GDPR general principles for EU users, and Broker security requirements. HypaValley is not a broker-dealer and does not store sensitive financial identity info.

10. Contact

For security concerns or data questions, email support@hypavalley.com.