Privacy Policy

Introduction

StatTradES is a product and service provided by StatTradES Corp. ("we," "our," or "us"). We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the StatTradES application ("the App") and any related services offered by StatTradES Corp.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide, including:

• Account Information such as name, email address, and password
• Trading Data including trades, notes, journals, psychology entries, and performance metrics
• Payment Information such as billing details processed securely by Apple. We never store your full payment details
• Profile Settings including preferences, account customizations, and user defined categories
• Communications sent through in app support or contact forms

1.2 Information Automatically Collected

• Usage Data such as features used, pages viewed, time spent, and interaction behavior
• Device Information such as browser type, operating system, device identifiers, and IP address
• Log Data including access times, error logs, and diagnostic reports
• Authentication Tokens stored in your browser's local storage to keep you signed in. We do not use third-party tracking cookies

1.3 Information from Third Party Services

• Authentication data if signing in with Apple (Sign in with Apple)
• Payment confirmation and billing info from Apple In-App Purchase
• Brokerage account data if you choose to connect a broker via the optional Broker Connect feature (powered by SnapTrade)

2. How We Use Your Information

2.1 Provide and Improve Services

• Operate and maintain the App
• Manage user accounts and subscriptions
• Personalize and improve user experience
• Develop new features and optimize performance

2.2 Communication

• Respond to support requests and inquiries
• Send service updates and technical notices
• Provide educational and product related information with your consent

2.3 Legal and Operational Purposes

• Process payments securely
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations
• Enforce Terms of Service and protect user rights

3. Data Storage and Security

3.1 Storage Location

Your data is securely stored using cloud infrastructure in physically protected data centers with advanced encryption and redundancy.

3.2 Security Measures

• Encryption including TLS/SSL for transmission and AES-256 for data at rest
• Access Controls using strict authentication and role based access
• Regular Audits including periodic security and vulnerability testing
• Backups for data integrity

Despite our efforts, no digital system is completely secure. You use the App at your own risk.

3.3 Retention

We retain personal data only as long as necessary to provide services or meet legal requirements. Upon account deletion, your data will be removed or anonymized within 90 days unless a longer retention period is required by law.

You may delete your account at any time directly within the App under Profile → Delete Account.

3.4 Trial History Retention

To prevent abuse of our one-time free trial offer, we retain a limited trial history record after account deletion. Specifically, when an account is deleted, we keep:

• The email address that was associated with the account
• The trial start and end dates

This retained record is used solely to enforce the "one free trial per user / per Apple ID" rule. It is not used for marketing, analytics, or any other purpose, and is not shared with third parties. The record is retained indefinitely. If you wish to have this record removed, you may submit a request through the in-app Contact Us form.

4. Data Sharing and Disclosure

4.1 No Sale of Personal Information

4.2 Service Providers

We share information with the following third party service providers strictly to operate the App:

• Apple for App Store distribution, secure payment processing through Apple In-App Purchase, and Sign in with Apple authentication
• Supabase for secure cloud database, authentication, and serverless function infrastructure
• Vercel for web application hosting and content delivery
• Resend for delivery of transactional emails such as account verification, password reset, and contact form messages
• SnapTrade for optional broker account connectivity (used only when Broker Connect feature is enabled)
• Cloud storage services for file and image storage

No personally identifiable trade data is shared with any artificial intelligence service or language model. The App contains no AI-powered features.

4.3 Legal Disclosures

• To comply with lawful requests, subpoenas, or court orders
• To protect the rights, safety, or property of StatTradES Corp., its users, or the public
• To detect and prevent fraud or misuse

4.4 Business Transfers

In the event of a merger, acquisition, or reorganization, user data may be transferred. You will be notified if such an event occurs.

5. Your Rights and Choices

5.1 General Rights (All Users)

• Access and export your data at any time
• Update or correct personal information through account settings
• Request deletion of your account and associated data
• Opt out of marketing communications via unsubscribe links or account settings

Most rights can be exercised directly within the App. For requests that cannot be completed in-app, contact us via the in-app Contact Us form. We respond within 30 days.

5.2 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and equivalent UK and Swiss law:

• Right of access, request confirmation of whether we process your data and obtain a copy
• Right to rectification, correct inaccurate or incomplete personal data
• Right to erasure ("right to be forgotten"), request deletion of your personal data, subject to limited exceptions where retention is required by law (such as the trial history record described in Section 3.4)
• Right to restriction of processing, request that we limit how we use your data in certain circumstances
• Right to data portability, receive your data in a structured, commonly-used, machine-readable format
• Right to object, object to processing based on legitimate interests, including for direct marketing
• Right to withdraw consent, where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing
• Right not to be subject to automated decision-making, including profiling that produces legal or similarly significant effects (note: the App does not use automated decision-making or profiling)

Legal basis for processing: We process personal data on the basis of (a) contractual necessity to provide the App and your subscription, (b) your consent for marketing communications, and (c) our legitimate interests in operating, securing, and improving the App.

International transfers: Your data may be processed and stored in Canada and the United States. Where we transfer personal data outside the EEA, UK, or Switzerland, we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses (SCCs) and equivalent UK and Swiss instruments.

To exercise any of these rights, contact us via the in-app Contact Us form. We respond within one (1) month, extendable by up to two (2) further months for complex or numerous requests, in which case we will inform you of the extension and the reasons. You also have the right to lodge a complaint with your local data protection supervisory authority.

5.3 California (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"):

• Right to know, request disclosure of the categories and specific pieces of personal information we collect, the sources, the business purpose, and the categories of third parties with whom we share it
• Right to delete, request deletion of personal information, subject to limited statutory exceptions
• Right to correct, request correction of inaccurate personal information
• Right to opt out of sale or sharing, we do not sell or share personal information for cross-context behavioral advertising. There is nothing to opt out of
• Right to limit use of sensitive personal information, we do not use sensitive personal information for purposes beyond what is reasonably necessary to provide the App
• Right to non-discrimination, we will not deny services, charge different prices, or provide a different level of service because you exercised your CCPA/CPRA rights

Categories of personal information collected in the past 12 months: identifiers (name, email, account ID), commercial information (subscription and billing records via Apple), internet/device activity (usage logs, IP address, device identifiers), and user-generated content (trades, journals, notes).

Sources: directly from you, automatically through your use of the App, and from Apple for subscription confirmation.

Business purposes: providing and maintaining the App, processing subscriptions through Apple, securing accounts, complying with legal obligations, and (with consent) sending product communications.

To exercise these rights, contact us via the in-app Contact Us form. We will verify your identity (typically by confirming control of your account email) before responding. We respond within forty-five (45) days, extendable by an additional forty-five (45) days when reasonably necessary, with notice of the extension.

6. Local Storage and Tracking

We use your browser's local storage to keep you signed in (authentication tokens) and to remember your preferences (such as your selected trading account or theme). We do not use third-party tracking cookies, advertising pixels, or cross-site analytics.

7. Children's Privacy

StatTradES is not intended for users under 18 years of age. We do not knowingly collect information from minors.

8. Canadian Anti-Spam Legislation (CASL)

StatTradES Corp. is a Canadian company. We comply with Canada's Anti-Spam Legislation (CASL).

• You will only receive commercial electronic messages from us if you have provided express or implied consent (for example, by creating an account or contacting support)
• Every commercial message will identify the sender, include valid contact information, and provide a clear and free unsubscribe mechanism
• You may withdraw consent at any time. Unsubscribe requests will be honored within 10 business days
• Transactional messages (such as password resets, security alerts, and account notifications) are sent regardless of consent because they are required to operate your account

9. Contact Us