Privacy Policy

Last updated: 2026-04-27

What we collect

• Account info (email, name, optional phone) you provide at signup.
• Authentication state (login times, IP addresses) for security + audit.
• Your watchlist, portfolios, paper + real trades.
• Push notification subscription endpoints (when you opt in).

What we do with it

• Operate the service, send transactional emails (verification, billing, alerts).
• Compute aggregate, anonymised analytics (no per-user × symbol mappings exposed).
• Comply with legal obligations.

What we don't do

• We don't sell your data.
• We don't share your trades with anyone outside our infrastructure.
• We don't track you across other websites.

Third parties

When their respective integrations are enabled by your admin:

• Stripe processes card payments. We never see your card.
• Resend delivers transactional email.
• Twilio delivers SMS verification (when phone verification is on).

Your rights

Under GDPR you can:

• Access — go to /account → *Export my data*.
• Erase — *Delete my account*. Personal fields are anonymised immediately; the remaining rows are hard-deleted after 30 days.
• Object / restrict — email the support address listed in settings.

Cookies

We set one strictly-necessary auth cookie. No tracking cookies, no banner needed.

Contact

Email the support address listed in app settings under support_email.