Privacy Policy

1. Introduction

Verdict Trading ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trading intelligence platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password (encrypted)
• Paper Holdings: Stock positions you manually track
• Holdings Data: Actual holdings and trading history (if you connect Questrade)
• API Keys: Third-party service credentials (stored encrypted)

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: Browser type, operating system, IP address
• Analytics Data: Google Analytics tracks visitor behavior (anonymized)
• Performance Data: Error logs and diagnostic information

2.3 Third-Party Data

We collect publicly available stock market data from third-party providers (Yahoo Finance, Alpha Vantage) to provide our services. This data is not personal information.

3. How We Use Your Information

We use your information for the following purposes:

• Provide and maintain our Service
• Generate personalized stock recommendations
• Track your paper and real holdings
• Send you trading signals and opportunities
• Improve our AI models and algorithms
• Analyze usage patterns to improve user experience
• Communicate important updates or changes
• Prevent fraud and ensure platform security
• Comply with legal obligations

4. How We Share Your Information

We do NOT sell your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: Third-party services that help us operate (hosting, analytics, email)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share information

Third-Party Services We Use:

• Vercel (hosting)
• Railway (database and backend hosting)
• Google Analytics (usage analytics)
• Yahoo Finance / Alpha Vantage (market data)

5. Data Security

We implement industry-standard security measures to protect your information:

• Passwords are hashed using bcrypt (never stored in plain text)
• API keys are encrypted using Fernet encryption
• All data transmission uses HTTPS/SSL encryption
• Database access is restricted and monitored
• Regular security updates and patches

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or compliance purposes.

7. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Opt-Out: Unsubscribe from marketing emails
• Data Portability: Receive your data in a structured format

To exercise these rights, please contact us through the settings page or via email.

8. Cookies and Tracking

We use cookies and similar tracking technologies:

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Google Analytics tracks usage (can be blocked via browser settings)
• Preference Cookies: Remember your theme and display preferences

You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

9. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Users

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to this transfer.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt-out of the "sale" of your information (note: we do not sell personal information).

13. GDPR Rights (EU Users)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our Service or sending you an email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us through the contact information provided on our website or via the settings page.