Privacy Policy

1. Data We Collect

• Account data: email, username, avatar, password hash, country (optional).
• Trading data: live account snapshots, trades, prop firm metadata you choose to log.
• Payout uploads: certificate images, OCR text extracted for verification.
• Payment data: handled by Stripe — we store customer/subscription IDs but never card numbers.
• Usage data: session timestamps, page views, user agent.

2. How We Use It

• To operate the Platform and provide the features you request.
• To verify payout uploads and prevent fraud.
• To compute leaderboards, XP, achievements.
• To send transactional emails (payouts, subscription receipts, support).
• To improve the Platform via aggregated analytics.

3. Sharing

We do not sell your personal data. We share data only with:

• Stripe — payment processing.
• Resend — transactional email delivery.
• Lovable Cloud / Supabase — hosting and database.
• Law enforcement, when legally compelled.

4. Public Information

Your username, avatar, level, XP, achievements, and any payouts you explicitly mark public are visible on leaderboards and profile pages. You can toggle leaderboard visibility from your profile settings.

5. Data Retention

We retain account data as long as your account is active. You may request account deletion from your profile settings; we will delete or anonymize personal data within 30 days, except where retention is required by law (e.g. payment records).

6. Your Rights (GDPR / CCPA)

• Right to access a copy of your data.
• Right to correct inaccurate data.
• Right to deletion ("right to be forgotten").
• Right to object to processing.
• Right to data portability.

To exercise these rights, contact us via support.

7. Security

We use industry-standard practices: TLS in transit, encryption at rest, Row-Level Security in the database, signature-verified webhooks, and audit logging on admin actions. No system is perfectly secure — please use a strong unique password.

8. Cookies

We use first-party cookies for authentication and session state. We do not use third-party advertising cookies.

9. Children

The Platform is not directed to children under 18 and we do not knowingly collect their data.

10. Changes

We will notify you of material changes via in-app notification or email.