Privacy Policy

TradeAlert LLC (“TradeAlert,” “we,” “our,” or “us”) operates the trading alert service available at tradealerthq.com (the “Service”). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights available to you.

By creating an account or using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide directly:

• Account information. When you register, we collect your email address, username, and password. Passwords are stored as a secure hash by Supabase Auth — we never see or store your plaintext password.
• Phone number. If you opt into SMS alerts, we collect your mobile phone number.
• Discord ID and username. When you link your Discord account to receive alerts, we store your Discord user ID and username, verified via a direct-message confirmation flow.
• Ticker preferences. The list of ticker symbols you configure for alert monitoring.
• Support communications. If you contact us for support, we retain the subject and content of your messages.

Information collected automatically or through third parties:

• Payment data. Billing is handled entirely by Stripe, Inc. We do not store your credit card number, CVV, or full payment card details. We store only a Stripe Customer ID and a card fingerprint (used solely to detect trial abuse across multiple accounts). See Stripe’s Privacy Policy.
• Usage and log data. Our hosting infrastructure (Vercel) and database (Supabase) may log IP addresses, request timestamps, and error events as part of normal operation. We do not deploy persistent analytics scripts or advertising trackers on the site.
• Rate-limiting data. Your user ID is used as a transient key in Upstash Redis to enforce API rate limits. No other personal data is stored there, and entries expire automatically (typically within 60 minutes).

2. How We Use Your Information

We use your personal information to:

• Create and manage your account
• Deliver trading alerts via your chosen channels (Discord, SMS, email)
• Process subscription payments and billing through Stripe
• Send transactional emails (account confirmation, password reset, billing receipts)
• Respond to support requests
• Detect and prevent fraud, trial abuse, and unauthorized account access
• Enforce our Terms of Service
• Comply with applicable legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising targeting or share it with data brokers.

3. Third-Party Services

We share personal information only as necessary to operate the Service or as required by law:

• Stripe.Processes subscription payments. We share your email address with Stripe to create a billing customer record. Stripe’s Privacy Policy governs data it collects directly.
• Supabase. Hosts our database and authentication system on AWS infrastructure in the United States. Your account data, ticker preferences, and subscription state are stored there.
• Discord.If you link your Discord account, we use the Discord API to send alerts and manage your server roles. We share your Discord ID with Discord APIs only; Discord’s own Privacy Policy governs that platform.
• SMS carriers. If you opt into SMS alerts, your phone number and alert message content are transmitted through SMS delivery infrastructure.
• Vercel. Hosts and serves the TradeAlert web application. Vercel may process connection metadata (IP address, request headers) as part of request routing and DDoS protection.
• Upstash. Your user ID is used as a rate-limiting key. No other personal data is shared.
• Law enforcement and legal process. We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of TradeAlert, its users, or the public.
• Business transfer. If TradeAlert LLC is acquired, merged, or its assets are transferred, your information may be transferred to the successor entity, subject to equivalent privacy commitments.

4. Data Retention

We retain your account information and subscription history for as long as your account is active and for a reasonable period afterward for legal, fraud-prevention, and dispute-resolution purposes. If you delete your account, we delete your personal information from our active systems within 30 days, except where longer retention is required by law (for example, Stripe retains payment transaction records per applicable financial regulations).

Ticker preferences and subscription history associated with a deleted account are removed at the time of deletion. Rate-limiting keys in Upstash expire automatically and are not retained.

5. Your Rights

Depending on where you live, you may have the following rights regarding your personal information. To exercise any of them, contact us at support@tradealerthq.com. We will respond within the timeframe required by applicable law (typically 30–45 days).

Rights available to all users:

• Access and correction. You may view and update your account information (email, username, phone number) at any time from your account settings. To request a copy of all personal data we hold about you, or to correct inaccurate data that you cannot update yourself, contact us.
• Account deletion. You may delete your account at any time from your account settings. This cancels your subscription, removes your personal data from our active systems, and revokes your Discord access.
• Notification preferences. You may update your notification channels (Discord, SMS, email) at any time from your account settings.

Additional rights for EEA and UK residents (GDPR):

Our lawful basis for processing your personal data is performance of a contract — we process your data to deliver the Service you have subscribed to. Where we process data for fraud prevention or legal compliance, we rely on legitimate interests or legal obligation, respectively.

• Right to erasure. You may request deletion of your personal data. We will comply unless we have a legal basis to retain it.
• Right to data portability. You may request your personal data in a structured, machine-readable format for transfer to another controller.
• Right to rectification. You may request correction of inaccurate or incomplete personal data.
• Right to restrict processing. In certain circumstances, you may request that we limit how we use your data while a dispute is resolved.
• Right to object. You may object to processing based on legitimate interests. We will cease such processing unless we have compelling grounds that override your interests.
• Right to withdraw consent. Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right to lodge a complaint. You have the right to lodge a complaint with your local data protection authority if you believe we have processed your data unlawfully.

Additional rights for California residents (CCPA):

• Right to know. You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to delete. You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to opt out of sale. We do not sell personal information. No opt-out is required.
• Right to non-discrimination. We will not discriminate against you for exercising any CCPA rights.

To submit a verifiable request under the CCPA, contact us at support@tradealerthq.com. We will respond within 45 days.

6. Cookies

We use a minimal number of cookies necessary to operate the Service. Specifically:

• Authentication session cookies. When you log in, Supabase Auth sets a session cookie that keeps you signed in across page loads. This cookie is essential for the Service to function and is not used for advertising.

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies. We do not integrate Google Analytics, Meta Pixel, or any similar advertising tracking technology.

You may configure your browser to block or delete cookies, but doing so will prevent you from remaining logged in to the Service.

7. Security

We implement reasonable technical and organizational measures to protect your personal information, including encryption in transit (TLS), hashed password storage via Supabase Auth, and row-level security policies restricting database access to authorized operations. However, no transmission over the internet is 100% secure. We cannot guarantee absolute security and are not responsible for unauthorized access resulting from circumstances outside our reasonable control.

8. International Data Transfers

TradeAlert is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. Users in the European Economic Area (EEA), United Kingdom, or Switzerland should be aware that U.S. data protection laws may differ from those in their home jurisdiction. By using the Service, you acknowledge this transfer. Where required, we rely on available legal transfer mechanisms (such as standard contractual clauses) to lawfully transfer data from the EEA or UK.

9. Children’s Privacy

The Service is not directed to persons under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have inadvertently collected information from a minor, we will delete it promptly. If you believe we may have collected information from a minor, please contact us at support@tradealerthq.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. For material changes, we will notify you by email or by a notice in the Service before the change takes effect. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact

Questions, data requests, or complaints regarding this Privacy Policy: support@tradealerthq.com

For information about subscription billing and refunds, please review our Refund Policy.

TradeAlert LLC · [PLACEHOLDER: Registered Agent Address, City, AZ ZIP]