What we keep, and why.

This Privacy Policy describes how [Company legal name] ("TradingSnipe," "we," "us," or "our") collects, uses, and shares information when you use the TradingSnipe application (the "Service"). It applies to all users of the Service.

We collect only the data needed to operate the Service. Concretely, our database stores the following:

We do not intentionally collect government ID numbers, bank account or brokerage account credentials, or biometric data. We do not require you to link a brokerage account to use the Service.

• To create and authenticate your account and maintain your session.
• To provide the features you use — dashboards, watchlists, alerts, portfolio views, and AI analysis history tied to your account.
• To generate AI analysis output by sending relevant ticker/market data (and, where applicable, your request context) to our AI provider, as described below.
• To enforce subscription-tier access and, if/when paid billing is active, to manage your subscription and billing status.
• To send service-related communications (for example, account or security notices) and, if you opt in, alert notifications you configure.
• To monitor, secure, and improve the Service, including rate-limiting abuse and diagnosing errors.
• To comply with legal obligations.

We do not sell your personal information.

We share a limited amount of data with the following categories of third-party providers in order to operate the Service:

• Market-data providers (Polygon.io, Finnhub, Financial Modeling Prep, FRED, CoinGecko, and similar providers) — these provide market data to the Service. We do not send them your personal account information; requests for quotes, charts, and fundamentals are made by our servers, generally without your personal identifiers.
• Anthropic (the provider of the Claude AI models powering our analysis features) — when you request AI analysis, relevant ticker/market context and your prompt or request are sent to Anthropic's API to generate the response. We do not knowingly send Anthropic your account password, payment details, or government ID.
• Payment processor (Stripe) — if and when paid subscriptions are enabled, billing will be handled by Stripe, which will process your payment details directly; we receive only subscription/billing status, not your full card number.
• Infrastructure providers — our hosting and database infrastructure provider(s) store data on our behalf under their own security and confidentiality terms.

Each third party processes data under its own privacy policy and terms; we encourage you to review those of any provider you want more detail on.

We use a session cookie to keep you signed in. Authentication is handled via NextAuth using a JSON Web Token (JWT) session: when you log in, a signed session token is stored in an HTTP cookie in your browser and used to identify your account (and tier/role) on subsequent requests. We do not use third-party advertising or cross-site tracking cookies.

If you use "remember me" / stay-signed-in behavior, the session cookie persists across browser restarts until it expires or you log out.

We retain your account data and associated workspace data (portfolio, watchlist, alerts) for as long as your account is active, so the Service can function. AI analysis session history is retained so you can review past sessions; you can archive sessions from within the product, and you may request deletion as described in Section 8 below.

If an account is deleted (including by an administrator on your request), associated analysis sessions are de-identified (disassociated from your account) rather than deleted outright in some cases, so that aggregate product history and legacy records remain intact without identifying you.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to or restrict certain processing (for example, under the EU/UK GDPR or the California CCPA/CPRA).

• Right to access — you can request a copy of the personal data we hold about you.
• Right to correction — you can update your name and certain profile details directly in the app, or ask us to correct inaccurate data.
• Right to deletion — you can request that we delete your account and associated personal data.
• Right to data portability — you can request an export of your data in a portable format.
• Right to object / restrict — you can object to certain uses of your data.

How to exercise these rights today: the Service does not yet have a self-service "delete my account" or "export my data" button for regular users. To exercise any of the above rights, contact us at the email in Section 10 and we will action your request manually. We will respond within a reasonable time and, in any event, within the time required by applicable law.

We take reasonable technical and organizational measures to protect your data, including hashing passwords before storage, rate-limiting authentication and API endpoints, and applying standard web security headers. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted to or stored by the Service.

The Service is not directed to, and is not intended for use by, anyone under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us at the email below and we will take steps to delete it.

We and our third-party providers (see Section 4) may process and store data in countries other than your own, including the United States. Where required by applicable law, we rely on appropriate safeguards for any such transfer.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

Questions about this Privacy Policy, or requests to access, export, or delete your data, can be sent to [email protected].