PRIVACY POLICY

Last Updated: March 27, 2026

1. What We Collect

We collect the following categories of personal information when you use our Service:

Data Type Examples Purpose
Identity Data Name, email address, phone number Account creation, communication
Financial Data Billing address, payment card (via Stripe) Subscription processing
Brokerage Data Broker account ID, API credentials (encrypted) Automated trade execution
Trading Data Positions, orders, P&L, trade history Dashboard, alerts, analytics
Usage Data Pages visited, features used, session duration Product improvement
Device Data IP address, browser type, OS, screen size Security, optimization
Communication Data Support messages, chat transcripts, feedback Customer support

2. How We Use Your Data

We use your personal information for the following purposes:

  • Providing and maintaining the Service, including automated trading features.
  • Processing subscriptions and payments.
  • Sending trade alerts, newsletters, and service notifications.
  • Improving our algorithms, dashboards, and user experience.
  • Detecting and preventing fraud, abuse, and security incidents.
  • Complying with legal obligations and regulatory requirements.
  • Communicating with you about your account or the Service.

We do not sell your personal data to third parties. We do not use your trading data for our own trading purposes.

3. Third-Party Services

We share limited data with the following third-party service providers to operate the Service:

Provider Data Shared Purpose
Stripe Payment card, billing info Subscription billing and invoicing
Twilio Phone number SMS alerts and verification codes
SendGrid Email address, name Transactional emails and newsletters
Telegram API Telegram user ID Real-time trade alerts
Polygon.io None (outbound only) Market data retrieval
Interactive Brokers Account ID, API credentials Trade execution via ib_insync
Anthropic (Claude) Anonymized trading queries AI coaching and analysis

Each third-party provider is bound by their own privacy policy and data protection agreements. We only share the minimum data required for each service to function.

4. Data Retention

We retain your data for the following periods:

  • Account data: For as long as your account is active, plus 30 days after deletion.
  • Trading data: Up to 7 years for regulatory compliance.
  • Payment records: As required by tax and financial regulations (typically 7 years).
  • Usage and analytics data: Up to 24 months.
  • Support communications: Up to 36 months after resolution.

You may request early deletion of your data at any time (see Your Rights section below).

5. Your Rights

Regardless of your location, you have the following rights regarding your personal data:

  1. Access: Request a copy of all personal data we hold about you.
  2. Correction: Request that inaccurate or incomplete data be corrected.
  3. Deletion: Request deletion of your personal data (subject to legal retention requirements).
  4. Portability: Receive your data in a structured, machine-readable format.
  5. Restriction: Request that we limit processing of your data in certain circumstances.
  6. Objection: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, contact us at privacy@qwqco.com. We will respond within 30 days.

6. GDPR Compliance

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following additional protections apply:

  • We process your data under lawful bases including consent, contract performance, legitimate interest, and legal obligation.
  • Data transfers outside the EEA are protected by Standard Contractual Clauses or adequacy decisions.
  • You have the right to lodge a complaint with your local supervisory authority.
  • Our Data Protection Officer can be reached at dpo@qwqco.com.

7. CCPA Compliance

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request details about the categories and specific pieces of personal information we have collected.
  • Right to Delete: You may request deletion of your personal information.
  • Right to Opt-Out: You may opt out of the sale of personal information. Note: We do not sell personal information.
  • Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact privacy@qwqco.com or call our privacy line.

8. Cookies and Tracking

We use the following types of cookies:

Cookie Type Purpose Duration
Essential Authentication, security, session management Session / 30 days
Functional User preferences, dashboard settings 1 year
Analytics Usage patterns, feature adoption 24 months
Affiliate Click tracking, referral attribution 90 days

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent the Service from functioning properly.

9. Security

We implement industry-standard security measures to protect your data:

  • All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
  • Brokerage API credentials are stored using envelope encryption.
  • Access to production systems is restricted and audited.
  • We conduct regular security assessments and penetration testing.
  • Database backups are encrypted and stored in geographically separate locations.

While we take reasonable precautions, no system is completely secure. In the event of a data breach, we will notify affected users within 72 hours as required by applicable law.

10. Contact Us

For any questions regarding this Privacy Policy or our data practices: