Privacy policy

Last updated: July 31, 2026

This policy explains what information SmartTradingAI collects, how it's used, and the choices you have. It applies to everyone who uses the Service, whether on a free or paid plan.

1. Information we collect

Account information: your email address and, if you sign in with Google, the basic profile information Google provides. We never see or store your password in plain text — authentication is handled by Supabase Auth.

Chart screenshots: the image you upload is sent to the analysis engine to generate your result and is held only in memory for that purpose. It is never written to our database or any persistent storage, and is not shared with or sold to any third party.

Analysis results: the structured output of each analysis (ticker, market, timeframe, verdict, levels, reasoning) is stored so you can view your history — this does not include the original screenshot.

Billing information: if you subscribe to a paid plan, payment is processed directly by Stripe. We never receive or store your full card number — we retain only a Stripe customer/subscription reference so we can reflect your plan and let you manage billing.

Usage data: we log minimal, anonymous product-usage events (e.g. that a chart was uploaded or analyzed, or that a subscription started) to power the public activity feed shown on our landing page. These events never include your name, email, user ID, or any other identifying information — see Section 4.

2. How we use information

To create and maintain your account and authenticate you.
To generate and store your analysis history.
To process payments and manage your subscription.
To send essential account and billing emails (e.g. confirmation links, payment receipts).
To maintain the security and integrity of the Service.

We do not sell your personal information to third parties, ever.

3. Who we share data with

We use a small number of subprocessors to run the Service: Supabase (database and authentication) and Stripe (payments). Each only receives the data it needs to perform its function, under its own privacy and security terms. We do not share your data with advertisers.

4. The public activity feed

Our landing page shows a live feed of recent, anonymized activity (e.g. "Someone just analyzed a chart"). The underlying database table for this feed contains only an event type, plan/billing cycle (for subscription events), and a timestamp — it has no column for a user ID, name, or email, so there is nothing in it to link back to you. Display names shown in the feed (like "Alex") are generated randomly at the moment they're displayed and are never derived from real user data.

5. Data retention and deletion

We retain your account and analysis history for as long as your account is active. You can delete your account at any time from Settings, which removes your profile and analysis history. Some records (e.g. billing history required for tax/accounting purposes) may be retained by our payment processor per its own retention obligations.

6. Security

Access to your data is protected with row-level security at the database level, meaning your analysis history is only ever readable by your own authenticated session — not by other users, and not through any client-side code path. Billing-sensitive fields on your account can only be modified by our verified payment webhook, never directly by any user, including you.

7. Cookies

We use a small number of essential cookies to keep you signed in and to protect against cross-site request forgery. We do not use advertising or third-party tracking cookies.

8. Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to certain processing. You can exercise most of these directly from Settings, or by contacting us — see below.

9. Changes to this policy

We may update this policy from time to time; the "Last updated" date above will reflect the most recent revision.

10. Contact

Questions about this policy or your data? Reach out via the Contact page.

This document is provided as a general starting point and is not a substitute for advice from a licensed attorney, particularly regarding region-specific requirements (e.g. GDPR, CCPA). Have it reviewed by counsel before relying on it for a live launch.