Privacy Policy

Effective March 7, 2026 · Last Updated March 7, 2026

Introduction

Stoa ("Stoa," "we," "us," or "our") operates the website https://stoaexchange.com, https://stoaexchange.com, and related services, including the Stoa Hardware Asset Price Index, data feeds, application programming interfaces (APIs), and associated platforms (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, subscribe to our data products, use our APIs, or otherwise interact with our Services. Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

Information We Collect

We collect information in several ways depending on how you interact with our Services.

Information You Provide Directly

We may collect the following categories of information that you voluntarily provide to us:

  • Account Registration Information. When you create an account, we collect your name, email address, company name, job title, phone number, and billing address.
  • Subscription and Payment Information. When you subscribe to our data products or API services, we collect payment information including credit card numbers, billing addresses, and transaction histories. Payment processing is handled by third-party payment processors; we do not store full credit card numbers on our servers.
  • Communications. When you contact us via email, through our website, or by other means, we collect the content of your communications, including any attachments or supporting documents.
  • Data Partnership Information. If you are a data partner providing transaction data, we collect business contact information, organizational details, and the data you submit pursuant to your data partnership agreement.
  • RFQ Platform Information. If you use our Request for Quote (RFQ) platform, we collect information about your hardware listings, bids, asks, and completed transactions.

Information Collected Automatically

When you access our Services, we automatically collect certain information, including:

  • Device and Browser Information. IP address, browser type and version, operating system, device identifiers, and screen resolution.
  • Usage Data. Pages visited, time spent on pages, click patterns, search queries, API call logs (endpoints accessed, frequency, timestamps), and referring URLs.
  • Cookies and Tracking Technologies. We use cookies, web beacons, pixel tags, and similar technologies to collect information about your browsing behavior.
  • Log Data. Server logs that record requests made to our servers, including timestamps, HTTP methods, response codes, and data volumes transferred.

How We Use Your Information

Service Delivery and Operations

  • To create and manage your account and provide access to our Services.
  • To process subscriptions, payments, and transactions on our platform.
  • To deliver index data, API access, and data feeds in accordance with your subscription tier.
  • To operate and maintain our RFQ marketplace and facilitate hardware transactions.
  • To provide customer support and respond to inquiries.

Index Calculation and Data Integrity

  • To aggregate, normalize, and validate price observations from multiple sources for the purpose of computing the Stoa Hardware Asset Price Index.
  • To perform quality assurance, outlier detection, and data integrity checks on submitted data.
  • To maintain audit trails of all data inputs and index calculations, as required by applicable regulatory standards including the IOSCO Principles for Financial Benchmarks.

Security and Fraud Prevention

  • To detect, investigate, and prevent fraudulent, unauthorized, or illegal activity.
  • To protect the integrity of our index and prevent market manipulation.
  • To enforce our Terms of Use and other agreements.

How We Share Your Information

We do not sell your personal information. We may share your information with service providers who perform services on our behalf, including cloud hosting, payment processing, analytics, and customer support. All service providers are contractually obligated to maintain the confidentiality and security of your information.

Data Security

We implement administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of your personal information, including encryption in transit (TLS 1.3) and at rest (AES-256), role-based access controls, and continuous monitoring.

Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal information. You may opt out of marketing communications at any time. To exercise any of these rights, please contact us at team@stoaindex.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated Privacy Policy on our website and updating the "Last Updated" date.

Contact Us

If you have questions regarding this Privacy Policy, please contact us:

Stoa
Email: team@stoaindex.com
Website: https://stoaexchange.com