Privacy Policy
Last updated: this is a starter draft — have a lawyer review it before relying on it.
1. Information we collect
When you create an account, we collect your email address and a securely hashed password (or a Google account identifier if you sign in with Google). We also store the strategies and backtests you create, and a record of credit purchases and usage.
2. How we use your information
We use this information to operate your account, run backtests you request, process payments, and send account-related emails (verification, password reset). We do not sell your personal data.
3. Payment information
Payments are processed by a third-party payment provider (Stripe). We never see or store your full card details.
4. Data retention
We keep your data for as long as your account is active. If you delete your account, it is immediately disabled and your email is anonymized; some records (such as past credit transactions) may be retained for accounting purposes.
5. Your rights
You can change your password, or permanently disable your account, at any time from the Account page. If you have questions about your data, contact support.
6. Security
Passwords are stored using industry-standard hashing (bcrypt). We use encrypted connections (HTTPS) to protect data in transit.
7. Third-party services
We use third-party services for payments (Stripe), optional sign-in (Google), and error monitoring, each of which processes data under its own privacy policy.
8. Changes
We may update this policy from time to time; continued use after changes means you accept the updated policy.
9. Contact
Questions about this policy? Contact support through your account page.