Privacy Policy — TradeNova

// TODO before launch: have a privacy attorney review this in the context of GDPR (EU visitors), CCPA/CPRA (California residents), and any state laws where you accept paying customers. The text below is a reasonable starting point, not a substitute for legal counsel.

TradeNova (“we”, “us”) respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.

1. Information we collect

Account information. When you create an account we collect your email address, display name (optional), and an authentication password handled by AWS Cognito. We never see or store your raw password.
Subscription & billing. If you subscribe, our payment processor (Stripe) collects your payment method and billing address. We receive only a tokenized customer ID and subscription status — never raw card data.
Usage data. We log standard server-side metadata (IP address, user agent, page paths, timestamps) to operate, secure, and improve the Service.
Communications. If you email us, we keep your message and contact details so we can respond.
Cookies. We use a small number of strictly necessary cookies for authentication and session management. We do not use advertising cookies.

2. How we use your information

To operate, maintain, and secure the Service.
To authenticate your account and prevent unauthorized access.
To send service-related emails (sign-up confirmation, billing receipts, alerts you opted into).
To improve our methodology and product (always on aggregated, de-identified data where possible).
To comply with legal obligations and enforce our Terms.

3. Sharing

We do not sell, rent, or trade personal information. We share information only with service providers necessary to operate the Service, under contractual confidentiality:

AWS — hosting, authentication (Cognito), email (SES).
Stripe — payment processing.
Vercel — frontend hosting.
Email/SMS providers (e.g. AWS SES, Twilio) — to deliver communications you opted into.
Law enforcement — only when legally compelled by valid process and after, where lawful, notifying you.

4. Data retention

We keep account and usage data for as long as your account is active and for a reasonable period after closure to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion at any time (see Your Rights below).

5. Security

We use industry-standard administrative, technical, and physical safeguards: TLS encryption in transit, encryption at rest for databases, role-based access control, and audit logging. No system is perfectly secure; we cannot guarantee absolute security.

6. Your rights

Depending on where you live, you may have the right to access, correct, port, restrict processing of, or delete your personal information; to object to processing; and to withdraw consent. To exercise any of these rights email privacy@tradenovahub.ai. We respond within 30 days. We do not discriminate against users who exercise privacy rights.

EU/UK residents (GDPR)

Our lawful basis for processing is (a) contract performance for account, subscription, and delivery of signals, (b) legitimate interests for security and product improvement, and (c) consent for marketing emails (which you can withdraw at any time). You have the right to lodge a complaint with your local supervisory authority.

California residents (CCPA/CPRA)

We do not sell or share personal information for cross-context behavioural advertising. California residents have the right to know what categories of personal information we collect, to access and delete that information, and to opt out of any future sale. Contact privacy@tradenovahub.ai to exercise these rights.

7. Children

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If we learn we have, we will delete it.

8. International transfers

We are headquartered in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. By using the Service you consent to that transfer.

9. Changes

We may update this Privacy Policy from time to time. Material changes will be announced via email and a notice on the Service at least seven (7) days before the effective date.

10. Contact

Privacy questions? Email privacy@tradenovahub.ai or write to TradeNova at TBD.