Privacy Policy

Last updated: March 25, 2026

1. Information We Collect

We collect information you provide directly: your name, email address, and password when you create an account. We also collect trading data you import or enter (trade executions, journal entries, tags, screenshots) and usage data such as pages visited and features used.

2. How We Use Your Information

We use your information to provide, maintain, and improve the Service; process transactions and send billing notifications; send password resets and account verification emails; generate analytics and insights based on your trading data; and respond to support requests.

3. Data Storage and Security

Your data is stored on secure, encrypted databases hosted by trusted cloud providers. We use industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), signed session tokens, and rate-limited authentication endpoints. We do not store your broker credentials — OAuth tokens are encrypted at rest.

4. Data Sharing

We do not sell, rent, or share your personal data or trading data with third parties. We use the following service providers who may process data on our behalf: Stripe (payment processing), Resend (transactional email), Sentry (error monitoring), and Vercel (hosting). Each provider is bound by their own privacy policies and data processing agreements.

5. Cookies

We use a single session cookie to keep you logged in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No data is shared with advertisers.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can export your data or request full account deletion by contacting us. Upon deletion, all your data is permanently removed from our servers within 30 days.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we remove all personal data and trading records within 30 days. Anonymized, aggregated data (e.g., total user count) may be retained indefinitely.

8. Children

The Service is not intended for users under 18 years of age. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice within the Service. Your continued use after changes constitutes acceptance.

10. Contact

For privacy-related questions, contact us at privacy@closingbell.app.