Privacy Policy
Last updated: January 2025
1. Introduction
TradeSmart, operated by Matt Fitzgerald ("we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our multi-asset opportunity scanner service. Please read this policy carefully.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, and password when you create an account
- Payment Information: Billing address and payment details (processed securely by Stripe)
- Communications: Information you provide when contacting support or providing feedback
- Preferences: Your notification settings, alert preferences, and dashboard configurations
2.2 Information Collected Automatically
- Usage Data: Features used, pages visited, scan history, and alert interactions
- Device Information: Browser type, operating system, device type, and screen resolution
- Log Data: IP address, access times, referring URLs, and error logs
- Cookies: Session cookies and authentication tokens (see Section 6)
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process your subscription payments and manage your account
- Send you alerts, notifications, and briefings based on your preferences
- Respond to your comments, questions, and support requests
- Analyze usage patterns to improve our algorithms and features
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations and enforce our Terms of Service
- Send you marketing communications (with your consent)
4. Third-Party Services
We use the following third-party services to operate TradeSmart:
Supabase
Database and authentication services. Your account data and usage information is stored securely on Supabase servers. View their privacy policy at supabase.com/privacy
Stripe
Payment processing. Your payment card details are handled directly by Stripe and are never stored on our servers. View their privacy policy at stripe.com/privacy
Vercel
Website hosting and deployment. View their privacy policy at vercel.com/legal/privacy-policy
Twilio (WhatsApp Alerts)
If you opt in to WhatsApp alerts, your phone number is shared with Twilio for message delivery. View their privacy policy at twilio.com/legal/privacy
Resend (Email)
Email delivery service for alerts and notifications. View their privacy policy at resend.com/legal/privacy-policy
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. If you close your account, we will delete or anonymize your personal data within 90 days, except where retention is required for legal, accounting, or audit purposes. Anonymized usage data may be retained indefinitely for analytics purposes.
6. Cookies and Tracking
We use cookies and similar technologies to:
- Essential Cookies: Required for authentication and security (cannot be disabled)
- Functional Cookies: Remember your preferences and settings
- Analytics Cookies: Help us understand how you use the Service (with consent)
You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using the Service.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure password hashing using industry-standard algorithms
- Regular security audits and vulnerability assessments
- Access controls limiting employee access to personal data
- Secure hosting with SOC 2 compliant providers
However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
8. Your Rights (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under GDPR:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your personal data
- Restriction: Request restriction of processing
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, please contact us at support@tradesmarthub.com. We will respond within 30 days.
9. International Data Transfers
Your information may be transferred to and processed in countries other than the UK, including the United States where some of our third-party service providers are located. We ensure appropriate safeguards are in place, including Standard Contractual Clauses, to protect your data in accordance with UK GDPR requirements.
10. Children's Privacy
TradeSmart is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For material changes, we will notify you via email or through the Service. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.