Privacy Policy

1. Information We Collect

Account data: Email address, name (optional), and hashed password when you create an account.

Usage data: Pages visited, features used, timeframes and symbols viewed, and connection timestamps.

Technical data: IP address, browser type, and device information for security and performance monitoring.

2. How We Use Your Information

We use your information to: (a) provide and maintain the Service; (b) authenticate your identity; (c) manage your subscription; (d) send transactional emails (verification, password reset); (e) improve the Service; (f) detect and prevent fraud or abuse.

3. Data Storage and Security

Your data is stored in encrypted databases. Passwords are hashed using bcrypt with a cost factor of 12. Authentication tokens are stored server-side in Redis with automatic expiration. We use HTTPS for all data transmission.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data with: (a) payment processors for subscription management; (b) email service providers for transactional emails; (c) law enforcement when required by law.

5. Your Rights (GDPR)

You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) delete your account and all associated data; (d) export your data; (e) withdraw consent at any time. To exercise these rights, use the account settings or contact us.

6. Account Deletion

You can delete your account at any time through the account settings. Upon deletion, all personal data is permanently removed from our databases. This action is irreversible.

7. Cookies

We use a minimal authentication cookie (hl_auth) to maintain your session. This cookie contains no personal data — it is a simple flag indicating you are logged in. We do not use tracking cookies or third-party analytics cookies.

8. Data Retention

Account data is retained for the lifetime of your account. Usage logs are retained for 90 days. After account deletion, all data is removed within 30 days from backups.

9. Changes to This Policy

We may update this Privacy Policy at any time. We will notify users of significant changes via email. Continued use of the Service constitutes acceptance.

10. Contact

For privacy-related inquiries, contact us at privacy@signalines.xyz.