← Back

GREEKSVIEW — Privacy Policy

Effective date: [DATE] · Last updated: [DATE]

1. What We Collect

Account data: email address, display name, password (bcrypt hash only), subscription tier.
Billing data: processed by Stripe; we store only your Stripe customer ID — never card numbers.
Cloud-sync data (Pro, opt-in): UI preferences, favorites, alerts, and journal entries you explicitly push. API keys and secrets are excluded by design and our server rejects them.
Operational logs: standard server logs (IP, user agent, timestamps) retained for [90] days.

2. What We Deliberately Do NOT Collect

Your brokerage, market-data, and AI-provider API keys. They are stored only in your browser's local storage and relayed per-request to the respective provider; they are never logged or persisted on our servers.
Your trades, positions, watchlists, or portfolio values (unless you opt into cloud sync of settings).
Advertising identifiers, third-party trackers, or analytics beacons.

3. How We Use Data

To authenticate you and operate your subscription.
To provide optional cloud sync you explicitly initiate.
To send transactional email (verification, password reset, billing). No marketing email without consent.

4. Sharing

We do not sell personal data. We share data only with: Stripe (payments), our email/SMTP provider (transactional email), and as required by law.

5. Your Choices

Export or delete cloud-synced settings at any time from Settings → Sync & Backup.
Clear all locally stored data (including API keys) via your browser's site-data settings.
Request account deletion at [SUPPORT EMAIL]; we delete account and sync data within 30 days.

6. Security

Passwords are hashed with bcrypt. Sessions use signed, httpOnly cookies. Traffic is encrypted in transit. No method is 100% secure; notify us immediately at [SUPPORT EMAIL] if you suspect unauthorized access.

7. Contact

[COMPANY NAME] · [ADDRESS] · [SUPPORT EMAIL]