Privacy Policy

1. Introduction

This Privacy Policy explains how TradeLens ("we", "us", "our") collects, uses, and protects your personal data when you use our website, applications, and services (collectively, the "Service").

2. Data We Collect

We may collect the following categories of information:

• Account Information: Email address, password (hashed), and basic profile details.
• Usage Data: Pages visited, features used, timestamps, device information, approximate location.
• Subscription & Billing Data: Plan type, subscription status, and billing metadata (actual payment details are processed by Stripe and not stored by us).
• Trading Preferences: Watchlists, preferred markets, and settings you configure in the platform.

3. How We Use Your Data

We use your data to:

• Provide, operate, and maintain the Service
• Authenticate users and secure accounts
• Deliver personalized dashboards, alerts, and signals
• Improve and optimize the performance of our algorithms and platform
• Communicate with you about updates, security notices, and support
• Comply with legal obligations and enforce our Terms of Service

5. Legal Basis (EU/EEA Users)

For users in the EU/EEA, we process personal data under the following legal bases:

• Performance of a contract (providing the Service)
• Legitimate interests (improving the Service, preventing abuse)
• Compliance with legal obligations
• Consent (where required, e.g., marketing communications)

6. Data Retention

We retain your data for as long as your account is active, and as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When your account is closed, we may retain limited data as required by law or for legitimate business interests.

7. Data Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure storage, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Third-Party Services

We use third-party providers to operate parts of the Service, including but not limited to:

• Supabase (authentication, database, storage)
• Stripe (payments and billing)
• Analytics and error monitoring providers

These providers process data on our behalf and are bound by contractual obligations to protect your information.

9. International Transfers

Your data may be processed and stored in countries outside your country of residence. Where required, we use appropriate safeguards such as standard contractual clauses to protect your data.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data (subject to legal obligations)
• Object to or restrict certain processing
• Data portability
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at: hello@alexma.app

11. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, contact us and we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Your continued use of the Service after changes indicates your acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy or our data practices, contact us at: hello@alexma.app