Privacy Policy

1. What we collect

• Account data: email, name, bcrypt password hash, plan tier.
• Trading data: watchlists, portfolio CSVs you upload, tracked positions, alert history. This data stays in your account and is never shared with other users or sold.
• Anthropic API key: if you provide one, it's stored AES-128 encrypted with a master key not stored in the database.
• Usage counters: daily AI-call counts for plan-quota enforcement.
• Session data: user-agent and IP, used only to show active sessions and detect suspicious logins.
• Stripe billing: Stripe handles your card data — we only store the customer ID and subscription status they return.

2. How we use it

To run the service. We don't sell your data, don't run ads, and don't use your portfolio or watchlist to train AI models. AI requests sent to Anthropic use the API key you provided (or your trial allocation) and are subject to Anthropic's privacy policy.

3. Third parties

• Stripe (payment processing) — policy
• Anthropic (AI API) — policy
• Resend (transactional email) — policy
• Yahoo Finance, Stooq (public market data) — read-only, no personal data sent
• ip-api.com (GeoIP country lookup for site analytics) — policy

4. Your rights (GDPR, CCPA)

You can:

• Export all your data anytime — Account Settings → "Export my data" returns a JSON dump.
• Delete your account anytime — Account Settings → "Delete account". Removes all rows owned by your user_id and cancels any active Stripe subscription. Deletion is immediate; backups purge within 30 days.
• Request changes to your data via support@genztrade.ai.

5. Security

Bcrypt cost-12 password hashes. JWT auth with 7-day expiry and per-session revocation. AES-128 (Fernet) encryption for API keys. HTTPS everywhere in production. We rate-limit auth endpoints to defeat brute force.

6. Cookies & local storage

We use browser localStorage (not cookies) to keep your JWT and UI preferences. No third-party analytics or advertising trackers.

7. First-party traffic analytics

We count visits to our public pages (landing, /login, /signup, /pricing, /help, /faq, /terms, /privacy, /follow-us) so we can understand which pages get traffic and from where. The data we keep is:

• Hashed IP, not raw IP. Your IP is combined with a per-install random salt and SHA-256 hashed before storage. Same visitor → same hash, but the raw IP cannot be recovered from the database.
• Page path, timestamp, user-agent, referrer URL. The standard log fields, used only in aggregate.
• Country (2-letter code). Looked up from your IP via a public GeoIP provider so we can see which countries our traffic comes from. Only the country code is stored — no city, region, latitude, or longitude. The raw IP is sent to the provider for the lookup; the provider's own privacy policy applies to that request.
• 180-day retention. Rows older than 180 days are pruned automatically.
• No third parties for storage. The data lives in our own database — we do not ship it to Google Analytics, Plausible, Mixpanel, or any external service.

Authenticated app pages (your cockpit, scanner, watchlist, etc.) are not tracked by this system — their access is already implied by your account session.

8. Children

GenZTrade is not for users under 18.

9. Contact

support@genztrade.ai