Privacy Policy

This policy explains what personal data PlusEdge AI ("we", "us") collects, why we collect it, and your rights under UK GDPR and the EU GDPR. Contact us at Famandus7@gmail.com for any privacy question or to exercise your rights.

Data we collect

• Account data: email address, display name, hashed password.
• Usage data: trades and notes you log in your journal, AI chat history, dashboard preferences, favourite markets.
• Billing data: handled by our payment processor (Stripe). We never see or store your full card number.
• Technical data: IP address, browser type, device info, basic analytics (page views, errors) so we can keep the service working.

How we use it

• To provide the service (run AI analysis on your trades, save your journal, send alerts).
• To process payments and prevent fraud.
• To send essential service emails (password resets, billing receipts, security notices).
• To improve the product (aggregated, anonymised analytics).
• To comply with legal obligations.

Our legal bases are: contract performance, legitimate interests, legal obligation, and consent (for non-essential cookies and marketing).

Sharing

We share data only with the processors needed to run the service:

• Supabase — database, authentication, file storage.
• Stripe — payment processing.
• OpenAI / Google — AI model inference (your prompts and trade data are sent for analysis; we do not allow them to train on your data).
• Twelve Data — market data lookups.

We never sell your personal data.

Cookies

We use essential cookies for login sessions and security. We do not use advertising or third-party tracking cookies. By using the site you consent to essential cookies; you can block them in your browser but the service will not work properly without them.

Retention

We keep your account data for as long as your account exists. When you delete your account from Settings, we permanently erase your profile, journal, chat history and preferences. Billing records are retained for 7 years to meet UK tax law.

Your rights

Under UK / EU GDPR you have the right to: access, correct, delete, restrict, port, or object to processing of your data, and to withdraw consent. Email Famandus7@gmail.com to exercise any of these. You can also lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is limited and logged. No system is 100% secure, but we follow industry best practices.