Privacy policy

Account information: the email address you use to sign up and the credential hash that authenticates you on each sign-in.

Billing information: payment metadata captured during checkout through Stripe, our payment processor. Card data goes directly to Stripe; we receive only tokenised payment metadata, never full card numbers.

Trading activity: positions, order history, execution logs, and the identifiers of any exchange API keys you connect to enable automated execution. This is what we reconcile against your subscription, what feeds your dashboard, and what powers your profit-share ledger.

Platform operation: authenticate you, deliver the signal feed you subscribed to, route trades you choose to execute against your connected exchange, render the dashboard that belongs to your account, and keep the service healthy.

Profit-share calculation: aggregate per-account trading outcomes into the figures that drive each bi-annual profit-share distribution. Profit-share math runs against your own ledger — your individual trading outcomes are never exposed to, or derived from, the activity of other subscribers.

Support: respond to your support requests, send account notices, deliver billing receipts, and ship security alerts when something affects your account.

Stripe handles billing on our behalf under their own data-handling commitments. Card data goes directly to Stripe at checkout; we receive only tokenised payment metadata and never see your card number.

We never sell your data. We do not share it with third-party advertisers, and we do not rent, trade, or otherwise transfer it for marketing purposes.

Service providers that touch our infrastructure (e.g., the email delivery path, our database host) process only the data needed for their role and remain bound by their own data-handling obligations.

Your account, billing, and trading-activity data is retained for the duration of your active subscription, plus 30 days after the subscription ends — a window that lets us reconcile the final profit-share cycle and meet tax-record retention requirements.

After that window the account record and its associated data are deleted from our primary systems; encrypted backups are purged on their normal rotation. You can request an export at any time before deletion from Settings → Account.

Access — request a copy of the personal data we hold about you. We respond within 30 days.

Deletion — close your account from Settings → Account, or email support. We will delete the data described above and confirm the deletion window in writing.

Export — request a machine-readable export of your account data, including transaction history.

Correct — update your signal preferences and contact details at any time from Settings without contacting support.

Questions about this policy, your data, or a rights request can be sent to vault-tec-ai@polsia.app. Privacy and account-deletion requests are prioritised ahead of general feature support; a human reads every message.