Privacy Notice
Privacy Officer (person in charge of the protection of personal information)
[PLACEHOLDER — privacy officer name to be confirmed]
[PLACEHOLDER — privacy officer email and mailing address to be confirmed]
Draft notice
This notice is a draft under review by Canadian legal counsel. It describes how the app currently works; it is not a statement that the app complies with any law.
What we collect and why
Your email address and display name to run your account; your preferences, watchlists, risk calculations and SIMULATED trading history to provide those features; AI analysis requests and usage to provide explanations and enforce limits; test-mode billing records to manage the Pro plan; and, if messaging is available, your conversations so they can be delivered. We do not sell personal information. We do not collect card numbers; test-mode payments are handled by Stripe.
Consent and choices
We use your information only for the purposes above. You can stop using optional features, download your data, or delete your account at any time from Settings.
Your rights
You can ask to access or correct your personal information, withdraw consent, or have it deleted. Settings lets you download a copy of your account data and delete your account. For any other request or complaint, contact the Privacy Officer below.
Service providers
We use hosting, database, AI and payment service providers that process information on our behalf. Some of them may store or process information outside your province or outside Canada.
Safeguards
Access to personal information is limited by account-level access rules checked on our servers. Administrators cannot read your conversations.
Privacy incidents
If an incident involving your personal information creates a risk of serious harm, we will notify you and the relevant privacy regulator as required, and record the incident.
Reporting a message
Reporting a message. If you report a message, we store a copy of its text, the reason you gave, and the report time. Only administrators who review reports can see this copy, and it is included in your own account download. Administrators cannot read your other conversations. We keep the report until it has been reviewed and for as long as needed to act on it or meet a legal obligation, and we delete it when your account is deleted, unless an administrator has placed it under a legal hold to meet a legal obligation. A held report is kept until an administrator releases the hold, and is then deleted if the account has already been deleted.
How long we keep information
| Information | How long it is kept | After account deletion |
|---|---|---|
| Reported message text (report copy, reason, time) | Until reviewed and for as long as needed to act on it or meet a legal obligation. No automatic deletion after review yet; maximum period pending legal review. | Deleted when the reporter or the reported person deletes their account, unless an administrator has placed a legal hold (with a written, audited reason). A held report is deleted when the hold is released. |
| Conversations and messages | While both participants keep their accounts. Messages cannot be edited or deleted individually. | The whole conversation, including the other participant's copy, is deleted when either participant deletes their account. |
| Paper (SIMULATED) position history and orders | For the life of the account; append-only. Period after closure pending legal review. | Kept, linked only to the former account ID (pseudonymised, not anonymised). Virtual account is archived. |
| SIMULATED fills and virtual ledger transactions | For the life of the account; append-only. Period after closure pending legal review. | Kept, linked only to the former account ID (pseudonymised, not anonymised). |
| Predictions and their outcomes | Kept permanently so accuracy history is complete. Period pending legal review. | Kept, linked only to the former account ID (pseudonymised, not anonymised). |
| AI usage records | For quota and cost evidence. Period pending legal review. | Kept, linked only to the former account ID (pseudonymised, not anonymised). |
| Short-term rate-limit counters | About two days. | Removed automatically within about two days. |
Data download and deletion
Your download includes your profile, preferences, research, billing records, SIMULATED history, conversations and messages you take part in, people you blocked, and reports you filed (the reported message text, your reason, time and status; never reports filed by others). Deleting your account removes your sign-in, profile, watchlists, saved analyses, conversations, messages, blocks and reports, except reports an administrator has placed under a legal hold, which are kept until the hold is released. SIMULATED financial history, predictions and usage records are kept pseudonymised as shown above.