Privacy Policy
Last updated: March 2026
1. Information We Collect
Account Information: When you register, we collect your email address, display name, and password (stored as a salted bcrypt hash). If you use OAuth sign-in, we receive your name and email from the provider.
Usage Data: We collect anonymized analytics about how you use the Service, including pages visited and features used. This data is used to improve the platform.
Payment Information: Subscription payments are processed by Stripe. We do not store credit card numbers or bank account details on our servers. Stripe's privacy policy governs their handling of your payment data.
2. How We Use Your Information
We use your information to: provide and maintain the Service, process subscription payments, send important account notifications (e.g., billing changes, security alerts), and improve the platform based on usage patterns.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
3. Data Storage & Security
Your data is stored in encrypted databases with access restricted to authorized systems only. Passwords are hashed using bcrypt with per-user salts. All connections use TLS encryption in transit.
While we implement industry-standard security measures, no system is 100% secure. You are responsible for keeping your account credentials confidential.
4. Cookies & Sessions
We use session cookies to keep you signed in and remember your preferences (such as theme selection). These are essential cookies required for the Service to function. We do not use third-party tracking cookies or advertising cookies.
5. Third-Party Services
The Service integrates with the following third-party providers:
Stripe: Payment processing. See stripe.com/privacy for their policy.
Yahoo Finance: Market data. Data is fetched server-side; your identity is not shared with Yahoo.
6. Data Retention
Account data is retained for the duration of your account. If you delete your account, your personal data will be removed within 30 days. Anonymized, aggregated analytics data may be retained indefinitely.
Trade journal entries and watchlist data are associated with your account and will be deleted with your account.
7. Your Rights
You have the right to: access the personal data we hold about you, request correction of inaccurate data, request deletion of your account and associated data, and export your trade journal data.
To exercise these rights, contact us through the support channels available on the platform.
8. Children's Privacy
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the platform. Your continued use of the Service after changes constitutes acceptance of the updated policy.