Privacy Policy
This policy describes what pre.trade (“we”, “us”) collects, why, and what we do with it. If anything is unclear, email privacy@pre.trade.
1. What we collect
- Account info: your email address, timezone, delivery time, and which channels (web / email) you want briefings on.
- Watchlist: the equity and crypto symbols you add. Stored per user, only visible to you.
- Holdings + lots (optional): the positions you record for portfolio tracking — symbols, quantities, prices paid, dates. This is sensitive financial data and we treat it that way (see “How we protect it” below).
- Billing: if you subscribe to Pro, Stripe collects and stores your payment method. We only receive a customer identifier — never your card details.
- Usage data: which briefings you opened, referral link clicks, and — if you consent via the cookie banner — analytics from third-party pixels.
2. Why we collect it
- To deliver your daily briefing on the schedule + channels you chose.
- To compute your portfolio value and P&L from your recorded positions + live prices.
- To bill you (Pro subscribers only).
- To measure whether our marketing works, and to improve the product.
We do not sell your data. We do not share your watchlist or holdings with anyone outside the services below, and never with other users.
3. Categories of service providers we use
To run the product we route data through service providers in the following categories. We share the minimum needed for each provider to do its job, and we don’t sell your data to anyone.
- Hosting + infrastructure — serves the website and stores standard server access logs.
- Database + authentication — securely stores your account, watchlist, holdings, and briefings.
- Market data providers — supply equity + crypto prices, company news, insider filings, and earnings data. We send them public ticker symbols; they receive no personal data about you.
- AI model provider — writes each briefing from the market data plus your watchlist and positions. Your data is used only to generate your own briefing and is not used to train their models.
- Transactional email provider — delivers the daily briefing email and sign-in links. Your email address is shared as the recipient.
- Payment processor — handles Pro subscription payments. Your card details never touch our servers.
- Public-social data provider — for the Pro-tier social signal feature, we query recent public posts about tickers you follow. Ticker symbols are shared; personal data about you is not.
We may change specific providers within each category over time (for reliability, cost, or feature reasons) without updating this policy — the categories, purposes, and data shared are what matters. If we ever add a new category of provider or use one in a materially different way, we’ll update this page.
4. How we protect it
- Row-Level Security in the database: your watchlist, holdings, briefings, and referral credits are only readable by you. No user can see another user’s data, not even accidentally.
- Holdings + P&L are never logged. Application logs contain no position quantities, cost bases, or dollar amounts.
- Cross-user isolation: the LLM that writes your briefing only ever sees your data — never another user’s.
- Encryption: data is encrypted in transit (TLS) and at rest (Supabase managed).
5. Cookies + tracking
We use two categories of cookies:
- Essential — needed to keep you signed in and to remember your preferences. Always on. You can’t use the product with these disabled.
- Analytics / advertising — third-party pixels (Meta, TikTok, X) that help us measure whether ads work. Off by default until you accept via the cookie banner. You can change your choice any time by clearing your browser’s pre.trade cookies.
6. Data retention
- Briefings: kept 14 days for free users, indefinitely for Pro. Viewable under Briefings → History.
- Watchlist + holdings: kept until you delete them or delete your account.
- Account: kept until you delete it. Deleting your account cascades to every holding, watchlist item, briefing, and referral credit tied to you.
- Server logs: standard Vercel retention (~30 days).
7. Your rights
Wherever you are, you can:
- Access the data we have on you — most of it is visible in the app.
- Correct it — edit your profile, watchlist, or holdings directly.
- Delete it — delete your account from Settings, or email us and we’ll do it.
- Export it — email us and we’ll send you a JSON dump of your data.
If you’re in the UK/EU: you have additional GDPR rights (portability, restriction of processing, complaint to your supervisory authority). Email us to exercise any of these.
8. International users
pre.trade is operated from the United States. If you use the service from outside the US, your data is transferred to and stored in the US. By using the service you consent to that transfer.
9. Children
pre.trade is not for anyone under 18. We don’t knowingly collect data from minors. If you believe we have, email us and we’ll delete it.
10. Changes to this policy
When we make material changes we’ll email active users and update the “last updated” date at the top. Continued use after a change means you accept the new version.
11. Contact
Questions or requests: privacy@pre.trade.