Privacy Policy

Last updated: March 28, 2026

1. Information We Collect

We collect information you provide directly: your name, email address, and password when you create an account. We also collect trading data you import or enter (trade executions, journal entries, tags, screenshots) and usage data such as pages visited and features used.

2. How We Use Your Information

We use your information to provide, maintain, and improve the Service; process transactions and send billing notifications; send password resets and account verification emails; generate analytics and insights based on your trading data; and respond to support requests.

3. Data Storage and Security

Your data is stored on secure databases hosted by trusted cloud providers. We use industry-standard security measures including HTTPS encryption in transit, bcrypt password hashing, HMAC-signed session tokens, rate-limited authentication endpoints, and AES-256-GCM field-level encryption for sensitive broker credentials (OAuth tokens, API keys) at rest. All data is isolated per user — no other account can access your data.

4. Staff Access to Your Data

Closing Bell staff cannot access your trade data, journal entries, notes, screenshots, or Edge Reports. Administrative tools are strictly limited to account management — email address, plan status, and aggregate activity counts (e.g., number of trades imported). Your trading activity and personal reflections are private and visible only to you.

5. Data Sharing

We do not sell, rent, or share your personal data or trading data with third parties. We use the following service providers who may process data on our behalf: Stripe (payment processing) and trusted third-party providers for hosting, email delivery, error monitoring, and AI-powered features. Each provider is bound by their own privacy policies and data processing agreements. When you use AI-powered features, relevant account data may be processed by our AI service provider solely to generate your requested output.

6. Cookies

We use a single session cookie to keep you logged in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No data is shared with advertisers.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can export your data or request full account deletion by contacting us. Upon deletion, all your data is permanently removed from our servers within 30 days.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we remove all personal data and trading records within 30 days. Anonymized, aggregated data (e.g., total user count) may be retained indefinitely.

9. Children

The Service is not intended for users under 18 years of age. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice within the Service. Your continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions, contact us at privacy@closingbell.app.