Privacy Policy

1. Information We Collect

Account information: When you create an account, we collect your email address and a hashed password. You may optionally provide a phone number for SMS alerts.

Preferences: Trading style, alert settings, quiet hours, watchlist, and commission rate you configure in Settings.

Alert history: A log of SMS alerts sent to you (symbol, price, timestamp) for your reference.

Usage data: When you consent to analytics, we collect page views and feature interactions via PostHog and associate signed-in events with a pseudonymous account identifier. We do not send your email address, individual trading decisions, or portfolio information to PostHog. You can opt out via the cookie banner.

2. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

• • Contract performance: Account data and preferences needed to provide the TradingEdgeIQ service
• • Consent: SMS alerts (explicit opt-in with TCPA consent), analytics cookies (opt-in via banner)
• • Legitimate interest: Service improvement based on aggregate usage patterns

3. How We Use Your Information

• • To provide and maintain the TradingEdgeIQ service
• • To send SMS alerts if you opt in and verify your phone number
• • To personalize signal thresholds based on your trading style
• • To improve the product based on aggregate usage patterns

4. What We Do Not Collect

• • We do not collect brokerage credentials or account information
• • We do not access your Robinhood or any other trading account
• • We do not track your trades or portfolio holdings
• • We do not sell or share your personal information with third parties for marketing

5. Data Storage and International Transfers

Your data is stored using Supabase (hosted on AWS in the United States). If you are located outside the US, your data is transferred to and processed in the US. We rely on Supabase's and AWS's standard contractual clauses and security certifications for lawful international data transfer.

We use industry-standard encryption for data in transit (TLS) and at rest (AES-256). SMS alerts are delivered through Twilio, which maintains its own SOC 2 compliance.

6. Data Retention

• • Account and product data: Retained while your account is active and removed from the primary application database when account deletion completes, except records we must retain for legal, security, fraud-prevention, billing, or dispute-resolution obligations.
• • Alert history: Removed from the primary application database when account deletion completes.
• • Deletion feedback: The reason you select may be retained for product improvement as the reason only, without your email address or account identifier.
• • Analytics data: Consented analytics may remain associated with a pseudonymous identifier until the analytics retention period expires. Contact us if you want us to process a separate analytics-data deletion request.

7. Third-Party Services

• • Supabase — authentication and data storage (AWS US-West)
• • Twilio — SMS alert delivery and phone verification
• • Vercel — website hosting (edge network)
• • Railway — backend API hosting
• • PostHog — consent-based product analytics (when enabled)
• • Resend — transactional email delivery
• • Binance / Coinbase — public market data (no account connection)

Each third-party service processes data under its own privacy policy. We do not share your personal data beyond what is necessary for each service to function (e.g., Twilio receives your phone number only if you opt into SMS).

8. Your Rights

Depending on your location, you may have the following rights:

• • Access and portability: Download a self-serve account and product data export from Settings at any time. Contact us for a broader access request.
• • Rectification: Update your email, phone, preferences, and watchlist in Settings.
• • Deletion: Delete your account and customer-owned product data from Settings. This is irreversible once deletion completes; limited records may be retained where legally or operationally required as described above.
• • Withdraw consent: Disable SMS alerts in Settings or reply STOP to any message. Disable analytics via the cookie banner.
• • Restrict processing: Pause all alerts in Settings without deleting your account.
• • Complaint: You have the right to lodge a complaint with your local data protection authority.

9. Cookies and Tracking

TradingEdgeIQ uses essential cookies for authentication (Supabase session tokens). These are required for the service to function and cannot be disabled.

Optional analytics cookies (PostHog) are only activated with your consent via the cookie banner. You can change your preference at any time.

If you arrive through an affiliate referral link, a referral‑attribution identifier is stored in your browser only after you accept optional cookies via the banner. If you decline, no referral identifier is stored and your visit is not attributed to an affiliate. You can change your preference at any time via the cookie banner.

10. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To exercise your rights, use the self-serve options in Settings or contact us.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the site. Continued use after changes constitutes acceptance.

12. Contact

For privacy questions or to exercise your rights, contact support@tradingedgeiq.com