Privacy Policy

1. Information We Collect

Account information: When you create an account, we collect your email address and a hashed password. Current alert setup does not collect a telephone number.

Preferences: Trading style, alert settings, quiet hours, watchlist, and commission rate you configure in Settings.

Alert history: A channel-aware notification delivery log and retained historical SMS records for your reference.

Support requests and contact messages: When you send us a message through the contact form, or when you ask EdgeIQ Bot to create a support ticket, we collect the information you provide in that request: your name, your email address, your company or organisation if you choose to give one, the topic you select, the subject, and the message itself. We also record the page you sent it from and the ticket reference we give you in reply. Where you create a ticket through EdgeIQ Bot, a limited amount of the immediately preceding conversation is attached to the ticket so that the person answering can see the context of your question. Please do not include passwords, API keys, or account numbers in a support message.

Usage data: When you consent to analytics, we collect page views and feature interactions via PostHog and Google Analytics 4 (GA4), and may associate signed-in events with a pseudonymous account identifier. GA4 receives its own client identifier, limited campaign and product context, and confirmed subscription lifecycle events; it does not receive your email address, payment details, individual trading decisions, or portfolio information.

2. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

• • Contract performance: Account data and preferences needed to provide the TradingEdgeIQ service
• • Consent: Telegram delivery (explicit per-product opt-in), analytics cookies (opt-in via banner)
• • Legitimate interest: Service improvement based on aggregate usage patterns; answering and administering a support request you choose to send us, and preventing abuse of that channel

3. How We Use Your Information

• • To provide and maintain the TradingEdgeIQ service
• • To deliver Telegram notifications when you connect Telegram and explicitly opt in to an available product
• • To provide email and in-app notifications according to their separate preferences
• • To personalize signal thresholds based on your trading style
• • To improve the product based on aggregate usage patterns
• • To reply to a contact-form message or support ticket you send us
• • To provide and administer support, including tracking a request through to its resolution
• • To investigate a technical or product issue you report
• • To detect and prevent abuse of the contact form and the support channel
• • To keep appropriate support and business records of the requests we receive and how we handled them

4. What We Do Not Collect

• • We do not collect brokerage credentials or account information
• • We do not access your Robinhood or any other trading account
• • We do not track your trades or portfolio holdings
• • We do not sell or share your personal information with third parties for marketing

5. Data Storage and International Transfers

Your data is stored using Supabase (hosted on AWS in the United States). If you are located outside the US, your data is transferred to and processed in the US. We rely on Supabase's and AWS's standard contractual clauses and security certifications for lawful international data transfer.

We use industry-standard encryption for data in transit (TLS) and at rest (AES-256). Telegram identity data is encrypted and associated with a key version so keys can be rotated.

6. Data Retention

• • Account and product data: Retained while your account is active and removed from the primary application database when account deletion completes, except records we must retain for legal, security, fraud-prevention, billing, or dispute-resolution obligations.
• • Alert history: Removed from the primary application database when account deletion completes.
• • Deletion feedback: The reason you select may be retained for product improvement as the reason only, without your email address or account identifier.
• • Support tickets and contact messages: Retained for as long as is reasonably necessary to resolve and administer your request, to prevent abuse of the support channel, and to meet legitimate legal, security, accounting, or dispute-resolution needs. We have not set a fixed period for this, because a support record's useful life depends on the request itself. You can ask us to delete a support ticket, and we will do so unless one of the reasons above requires us to keep it.
• • Analytics data: Consented analytics may remain associated with a pseudonymous identifier until the analytics retention period expires. Contact us if you want us to process a separate analytics-data deletion request.

7. Third-Party Services

• • Supabase — authentication and data storage (AWS US-West)
• • Telegram — optional bot connection and notification delivery when available and enabled
• • Twilio — historical SMS delivery and phone verification; not used for current alerts or verification
• • Vercel — website hosting (edge network)
• • Railway — backend API hosting
• • PostHog — consent-based product analytics (when enabled)
• • Google Analytics 4 — consent-based marketing and conversion measurement using pseudonymous identifiers (when enabled)
• • Resend — transactional email delivery, including the notification we send to our own support address when you submit a contact form or support ticket. That notification email contains the email address you gave us and the text of your message, because those are what our support team needs in order to reply.
• • Stripe — subscription payment processing and billing administration
• • Binance / Coinbase — public market data (no account connection)

Each third-party service processes data under its own privacy policy. We do not share your personal data beyond what is necessary for each service to function.

Historical SMS service: Twilio previously processed telephone numbers, verification requests, and alert delivery metadata for users who opted in. TradingEdgeIQ no longer uses Twilio for current alerts or verification, but historical records may be retained under the retention terms above.

8. Your Rights

Depending on your location, you may have the following rights:

• • Access and portability: Download a self-serve account and product data export from Settings at any time. Contact us for a broader access request.
• • Rectification: Update your email, preferences, watchlist and Telegram connection in Settings.
• • Deletion: Delete your account and customer-owned product data from Settings. This is irreversible once deletion completes; limited records may be retained where legally or operationally required as described above.
• • Withdraw consent: Disable a Telegram product, pause or disconnect Telegram in Settings, or send STOP to the bot. Disable analytics via the cookie banner.
• • Restrict processing: Pause Telegram in Settings without deleting your account. Email and in-app preferences remain separate.
• • Complaint: You have the right to lodge a complaint with your local data protection authority.

9. Cookies and Tracking

TradingEdgeIQ uses essential cookies for authentication (Supabase session tokens). These are required for the service to function and cannot be disabled.

Optional analytics technologies (PostHog, Google Analytics 4, and Microsoft Clarity) activate only after your consent. We use them to understand product use, improve usability, and measure which marketing journeys lead to a paid subscription. Google's retention settings govern GA4 data already collected; withdrawing stops future browser collection. For a signed-in account, the same choice also stops future server-side subscription measurement and clears stored subscription attribution identifiers.

If you arrive through an affiliate referral link, a referral‑attribution identifier is stored in your browser only after you accept optional cookies via the banner. If you decline, no referral identifier is stored and your visit is not attributed to an affiliate. You can change your preference at any time via the cookie banner.

You can withdraw or grant optional analytics consent at any time below.

10. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To exercise your rights, use the self-serve options in Settings or contact us.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the site. Continued use after changes constitutes acceptance.

12. Contact

For privacy questions or to exercise your rights, use the contact form or email support@tradingedgeiq.com