Privacy Policy

Last updated: September 22, 2026

1. Information We Collect

Account data: When you register, we collect your email address, name (optional), and hashed password. If you sign in with Google, we receive your Google profile information (name, email, profile picture).

Usage data: We collect anonymized analytics data including pages visited, features used, and backtest counts via PostHog (EU datacenter). We also track performance metrics (page load times) to improve the Service.

Strategy data: Your strategy prompts and backtest parameters are stored to provide the Service. Backtest results are associated with your account.

2. How We Use Your Data

We use your data to: (a) provide and improve the Service; (b) process payments; (c) send transactional emails (OTP verification, account notifications); (d) analyze usage patterns to improve features. We do not sell your personal data to third parties.

3. Data Storage & Security

Your data is stored on servers in Europe (OVHcloud, France). Passwords are hashed using bcrypt. All connections are encrypted via TLS. We use Cloudflare Turnstile for bot protection, which processes minimal data (no cookies or tracking).

4. Third-Party Services

We use the following third-party services:

  • PostHog (EU) — anonymized product analytics
  • Sentry — error tracking and performance monitoring
  • Resend — transactional email delivery
  • Google OAuth — optional social sign-in
  • Cloudflare Turnstile — bot protection
  • Paddle — payment processing (Merchant of Record)

5. Cookies & Tracking

We use localStorage for authentication tokens and user preferences (theme, language). PostHog uses localStorage for anonymous session tracking. We do not use third-party advertising cookies.

6. Your Rights

You have the right to: (a) access your personal data; (b) request correction of inaccurate data; (c) request deletion of your account and associated data; (d) export your strategy and backtest data. To exercise these rights, contact [email protected].

7. Data Retention

Account data is retained as long as your account is active. When you delete your account, personal data is removed within 30 days. Anonymized analytics data may be retained indefinitely.

8. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes

We may update this policy from time to time. We will notify registered users of significant changes via email.

10. Contact

For privacy-related questions, contact us at [email protected].