PRIVACY POLICY FOR GAPIT.AI

Last Updated: May 2026

Effective Date: May 2026

INTRODUCTION

GAP IT, operated by CABB Trading Capital LLC ("GAP IT," "we," "us," or "our"), is a real-time stock scanning and market information platform that provides educational and informational content to retail traders. This Privacy Policy ("Policy") describes how we collect, use, maintain, share, and protect personal information when you access or use our website at gapit.ai (the "Site") and our scanner and related services (collectively, the "Services").

By accessing or using the Site or Services, you acknowledge that you have read and understood this Policy. If you do not agree with any portion of this Policy, please do not access the Site or use the Services.

Important Notice About Our Services. GAP IT is a market information publisher. We display real-time market data, scanner alerts, news summaries, and other information for educational and informational purposes only. GAP IT does not place, execute, or facilitate trades on your behalf. We are not a broker-dealer, registered investment adviser, financial planner, or fiduciary. We do not provide personalized investment advice, and nothing displayed on the Site or Services constitutes a recommendation to buy, sell, or hold any security. All trading and investment decisions are yours alone.

1. INFORMATION WE COLLECT

We collect the following categories of information when you visit the Site, register for a trial, subscribe to the Services, or otherwise interact with us:

a. Identifiers and Contact Information. Full name, email address, telephone number, postal address (if voluntarily provided), unique online identifiers, account username, and IP address.

b. Account and Subscription Information. Account credentials, subscription tier, trial status, billing history, and customer service correspondence.

c. Payment Information. Payment is processed by our third-party payment processor. We receive limited information from the processor — typically the last four digits of your card, card type, expiration date, billing ZIP, and a tokenized reference — but we do not store or have access to your full card number, CVV, or full payment credentials.

d. Usage and Activity Data. Scanner settings, filter preferences, watchlists, ticker searches, panel configurations, session duration, click activity, feature engagement, and the time and frequency of your interactions with the Services.

e. Device and Technical Information. Device type, browser type and version, operating system, screen resolution, language preference, referring URL, time zone, and approximate geographic location derived from IP address.

f. Cookies and Similar Technologies. Information collected through cookies, pixel tags, web beacons, local storage, session storage, and similar tracking technologies. See Section 4 below.

g. Communications. Records of your communications with us, including support tickets, emails, chat messages, and SMS replies.

h. Optional Information. Information you voluntarily provide through testimonials, surveys, feedback forms, affiliate program enrollment, or social-media interactions tagging GAP IT.

2. HOW WE COLLECT INFORMATION

We collect information in the following ways:

• Directly from you when you register an account, start a trial, subscribe, contact support, enroll in our affiliate program, or otherwise communicate with us.
• Automatically when you use the Site or Services, through cookies, server logs, analytics tools, and similar technologies.
• From third parties including our payment processor (limited transactional information), authentication and security providers, and analytics partners.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

• To provide, operate, maintain, and improve the Site and Services;
• To create, manage, and authenticate your account;
• To process subscription payments, manage billing, issue refunds, and prevent chargeback fraud;
• To deliver scanner alerts, watchlist data, news summaries, and other content you request;
• To send service notifications, account updates, security alerts, and administrative communications;
• To send promotional communications, newsletters, and product updates (where permitted and subject to your communication preferences);
• To respond to your inquiries, support requests, and feedback;
• To detect, prevent, and investigate fraud, abuse, trial-program abuse, unauthorized access, and violations of our Terms of Service;
• To enforce our Terms of Service and other agreements;
• To analyze usage trends, measure feature engagement, and improve product performance and reliability;
• To comply with applicable laws, regulations, court orders, subpoenas, and lawful requests from public authorities;
• To protect our rights, property, and safety, and the rights, property, and safety of our users and the public;
• For any other purpose disclosed to you at the time the information is collected or with your consent.

We do not sell your personal information. We do not engage in cross-context behavioral advertising. We do not share your personal information with third parties for their own independent marketing purposes.

4. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to operate the Site, remember your preferences, analyze usage, and improve your experience. The categories of cookies we use include:

• Strictly Necessary Cookies. Required for the Site to function, including authentication, security, session management, and load balancing. These cannot be disabled without breaking core functionality.
• Functional Cookies. Remember your preferences, scanner configurations, watchlist selections, and similar settings.
• Analytics Cookies. Help us understand how users interact with the Services so we can improve them. These cookies collect aggregated, pseudonymous information.
• Affiliate and Referral Cookies. Track referrals made through our affiliate program so that we can properly attribute and pay affiliate commissions.

You may disable cookies through your browser settings. However, doing so may prevent you from accessing or using certain features of the Services. Our Site does not currently respond to "Do Not Track" browser signals because no uniform industry standard for honoring these signals has been adopted.

5. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. However, we may share your information with the following categories of recipients in support of operating the Services:

a. Service Providers and Vendors. We engage trusted third-party service providers to perform functions on our behalf, including:

• Cloud infrastructure and hosting providers;
• Authentication and identity management providers;
• Database and data storage providers;
• Content delivery network (CDN) and security providers, including those that provide bot protection, DDoS mitigation, and web application firewall services;
• Email and SMS communication providers;
• Customer support and ticketing providers;
• Analytics and product-improvement providers;
• AI-powered content processing providers used to generate certain summaries and informational content displayed within the Services;
• Market data providers that supply price quotes, fundamental data, news, and related market information under licensed agreements;
• Payment processing providers;
• Legal, accounting, tax, and other professional advisors.

Each service provider is contractually obligated to protect your information and use it only for the purposes for which we engaged them.

b. Affiliates and Corporate Group. We may share information internally within CABB Trading Capital LLC and any current or future affiliates under common ownership.

c. Business Transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, dissolution, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will provide notice where required by law.

d. Legal and Regulatory Authorities. We may disclose information to law enforcement, regulators, courts, or other governmental authorities when we believe in good faith that disclosure is required by law, regulation, court order, subpoena, or other legal process, or is necessary to (i) defend against legal claims, (ii) prevent fraud or harm, (iii) protect the rights, property, or safety of GAP IT, our users, or others, or (iv) cooperate with a lawful investigation.

e. With Your Consent. We may share your information with other third parties when you have given us your explicit consent to do so.

f. Aggregated or De-Identified Data. We may share aggregated, anonymized, or de-identified information — which cannot reasonably be used to identify you — for any lawful purpose, including analytics, benchmarking, research, marketing, and product development.

6. PAYMENT PROCESSING

All payment processing is handled by our third-party payment processor, Stripe, Inc. ("Stripe"). Stripe is certified to PCI Service Provider Level 1, the most stringent level of payment-card security certification.

We do not collect, store, or transmit full credit-card numbers, CVV codes, or full payment credentials. Payment forms are rendered by Stripe components embedded into our checkout pages, which means your sensitive payment data does not pass through our servers. We receive only a tokenized identifier and limited transactional metadata sufficient to manage your subscription.

Your use of our payment functionality is also subject to Stripe's privacy policy and terms, available at stripe.com.

7. SMS COMMUNICATIONS

With your explicit prior consent, we may send you SMS messages relating to your account, scanner alerts, service updates, promotional content, and similar communications. Message and data rates may apply. Message frequency varies.

You may opt out of SMS communications at any time by replying STOP to any GAP IT message or by updating your notification preferences in your account dashboard. Reply HELP for help. Opting out of SMS does not affect your ability to receive transactional emails required for account security and billing.

8. MARKET DATA AND SERVICE DISCLAIMER

The Services display real-time and historical market data, scanner alerts, news summaries, and analytical content sourced from licensed institutional-grade third-party data providers.

The information displayed on the Services is provided for educational and informational purposes only and is not investment advice, a recommendation to buy or sell any security, or a solicitation of any transaction. Market data, scanner alerts, news summaries, and any other content may contain delays, errors, or omissions. Past performance of any security or scanner signal does not guarantee future results.

GAP IT is a publisher of market information. We do not place, execute, route, clear, or settle trades on your behalf. We are not registered as a broker-dealer, investment adviser, futures commission merchant, or commodity trading adviser. Any trading or investment decision you make based on information displayed through the Services is made at your own risk and is your sole responsibility. You should consult with a licensed financial professional before making any investment decision.

You acknowledge and agree that:

• Trading securities involves substantial risk of loss and is not suitable for all investors;
• The majority of active retail traders lose money;
• Scanner alerts identify price and volume movements, not trade recommendations;
• Any AI-powered content, including automatically generated news summaries, may contain inaccuracies and should be independently verified;
• We do not guarantee the accuracy, timeliness, completeness, or reliability of any information displayed through the Services;
• We are not liable for any trading losses, missed opportunities, or other damages arising from your use of the Services.

We do not redistribute raw exchange data and do not provide market data to third parties for commercial redistribution.

9. DATA SECURITY

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, loss, and destruction. These safeguards include encryption of data in transit using industry-standard TLS/SSL, access controls limiting employee and contractor access to personal information on a need-to-know basis, secure cloud infrastructure with restricted access, and ongoing monitoring of our systems.

However, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security and you provide your personal information at your own risk. You are responsible for safeguarding your account credentials and for any activity conducted through your account.

10. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy, including to:

• Provide and maintain the Services while your account is active;
• Comply with our legal, tax, accounting, and regulatory obligations (billing and subscription records are typically retained for at least seven (7) years to comply with U.S. tax and chargeback-protection requirements);
• Resolve disputes and enforce our agreements;
• Protect against fraud and abuse.

When we no longer have a lawful basis or business need to retain your information, we will delete, anonymize, or aggregate it. Where deletion is not technically feasible (for example, because the information has been preserved in backup archives), we will securely store and isolate the information from any further processing until deletion is possible.

11. YOUR RIGHTS AND CHOICES

a. All Users

Regardless of where you reside, you have the following rights with respect to your personal information:

• Access. You may request a copy of the personal information we hold about you.
• Correction. You may request that we correct inaccurate or incomplete personal information.
• Deletion. You may request that we delete your personal information, subject to legal and contractual retention obligations.
• Marketing Opt-Out. You may opt out of marketing communications at any time by following the unsubscribe instructions in our emails, replying STOP to SMS messages, or updating your account preferences.
• Account Closure. You may close your account at any time by contacting us at hello@gapit.ai.

To exercise any of these rights, contact us at hello@gapit.ai. We will respond within forty-five (45) days, with the option to extend by an additional forty-five (45) days where reasonably necessary, in accordance with applicable law.

b. California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, "CCPA"):

• The right to know what categories and specific pieces of personal information we have collected about you;
• The right to know the categories of sources of personal information collected;
• The right to know the business or commercial purposes for collecting personal information;
• The right to know the categories of third parties with whom we share personal information;
• The right to request deletion of your personal information;
• The right to correct inaccurate personal information;
• The right to opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising);
• The right to limit the use of sensitive personal information (we do not use sensitive personal information beyond what is necessary to provide the Services);
• The right not to be discriminated against for exercising your CCPA rights.

To submit a CCPA request, email hello@gapit.ai with the subject line "California Privacy Request." We may need to verify your identity before responding. You may also designate an authorized agent to make a request on your behalf.

"Shine the Light." California residents may request a list of third parties to whom we have disclosed personal information for those parties' direct marketing purposes during the preceding calendar year. We do not currently disclose personal information for third-party direct marketing purposes.

c. Residents of Other U.S. States

If you reside in Virginia, Colorado, Connecticut, Utah, Texas, Florida, Oregon, Montana, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Iowa, Kentucky, Nebraska, Rhode Island, or any other U.S. state that has enacted a comprehensive consumer privacy law, you may have rights similar to those described above for California residents, including the rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising, the sale of personal information, and certain profiling activities.

To exercise these rights, contact us at hello@gapit.ai. You may also appeal any decision we make regarding your request by contacting us at the same address with the subject line "Privacy Rights Appeal."

d. European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation ("GDPR") and the UK GDPR:

• The right to access your personal data;
• The right to rectify inaccurate personal data;
• The right to request erasure of your personal data;
• The right to restrict processing of your personal data;
• The right to object to processing, including for direct marketing purposes;
• The right to data portability;
• The right to withdraw consent at any time, where processing is based on consent;
• The right to lodge a complaint with your local data protection supervisory authority.

The legal bases on which we rely to process your personal data include: (i) performance of a contract with you (to provide the Services); (ii) our legitimate interests in operating, securing, and improving our business; (iii) your consent (for marketing communications and certain cookies); and (iv) compliance with legal obligations to which we are subject.

To exercise your rights, contact us at hello@gapit.ai.

12. INTERNATIONAL DATA TRANSFERS

GAP IT is operated from the United States. If you access the Services from outside the United States, your personal information will be transferred to, stored, and processed in the United States or in other jurisdictions where our service providers operate. Data protection laws in these jurisdictions may differ from, and may be less protective than, the laws of your country.

Where required by applicable law, we implement appropriate safeguards for international data transfers, including the use of Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner's Office, or other lawful transfer mechanisms.

By using the Services, you consent to the transfer, storage, and processing of your personal information in the United States and other jurisdictions described in this Policy.

13. CHILDREN'S PRIVACY

The Services are not intended for, directed to, or designed for use by anyone under the age of eighteen (18). We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a person under eighteen (18) without verified parental consent, we will take prompt steps to delete that information.

If you are a parent or legal guardian and believe your child has provided personal information to us, please contact us at hello@gapit.ai and we will work with you to address your concerns.

14. THIRD-PARTY LINKS AND SERVICES

The Services may contain links to third-party websites, applications, or services that are not operated by GAP IT. We are not responsible for the privacy practices, content, or security of any third-party websites or services. We encourage you to review the privacy policies of any third party before providing them with your information.

15. DATA BREACH NOTIFICATION

In the unlikely event of a data breach that materially affects your personal information, we will notify you and the appropriate regulatory authorities in accordance with applicable law. Notification will be made by email, by prominent notice on the Site, or by other means reasonably designed to inform affected users in a timely manner.

16. CHANGES TO THIS POLICY

We may update this Policy from time to time to reflect changes in our practices, technologies, legal obligations, or other factors. When we make material changes, we will notify you by email (if we have your email address) or by posting a prominent notice on the Site at least thirty (30) days before the changes take effect, where required by law. The "Last Updated" date at the top of this Policy indicates when it was most recently revised.

Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you must stop using the Services and may close your account at any time.

17. CONTACT US

If you have any questions, concerns, complaints, or requests regarding this Policy or our privacy practices, please contact us:

By Email: hello@gapit.ai

By Mail:
CABB Trading Capital LLC
Attn: Privacy
PO Box 815
Ellenton, FL 34222
United States

Online: gapit.ai/contact

GAP IT is a product of CABB Trading Capital LLC. GAP IT is a market information publisher and scanner tool provided for educational and informational purposes only. GAP IT does not provide financial, investment, legal, or tax advice, and does not place, execute, or facilitate trades on behalf of users. All trading decisions are made solely by the user. Powered by licensed real-time market data.

© 2026 CABB Trading Capital LLC. All rights reserved.