This Privacy Policy explains what we collect, how we use it, and the choices you have. Plain English first; lawyer text only where required.
1. What we collect
You give us
- Account info: your email and (for password signups) a hashed password. Optional: name and Google profile picture if you sign in with Google.
- Payment info: we do not store your card. Stripe handles all payments; we receive only a session ID, the amount, and your subscription tier.
- Broker keys (Auto-Trade Pro only): if you provide Coinbase / Kraken / Tradovate API keys, we store them encrypted at rest and use them solely to execute the trades you authorize.
- Plaid (if used): Plaid public tokens for bank linking. We do not see your bank credentials.
We collect automatically
- Standard server logs (IP address, user agent, request timestamps) for security and debugging.
- Aggregate engagement data (which pages were visited, did you click the upgrade button, etc.) — we use Stripe Checkout’s built-in analytics and nothing else right now.
2. How we use it
- To run your account, deliver signals, process payments, and send you transactional emails (welcome, payment receipt, important security notices).
- To improve the Q-bit engine and the Service overall.
- To comply with the law.
We do not sell your data. We do not run ad networks or third-party tracking pixels on this site.
3. Who we share with
- Stripe — for payment processing. See stripe.com/privacy.
- Resend — to deliver transactional emails. See resend.com/legal/privacy.
- Plaid (only if you link a bank) — for ACH funding. See plaid.com/legal.
- Brokers (Coinbase / Kraken / Tradovate, Auto-Trade Pro only) — to place trades you authorized.
- Law enforcement when legally required.
4. Data retention
We keep account data while your account is active and for 12 months after closure (to satisfy tax / dispute / fraud-investigation needs). Payment records are kept for 7 years per US tax law. Broker API keys are deleted immediately upon account closure or upon your request.
5. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data. Email us at fabricationsbyfoster@gmail.com and we’ll respond within 30 days.
6. Security
We use industry-standard encryption in transit (TLS) and at rest for sensitive fields. No system is perfectly secure; you are responsible for the strength of your password and the security of your email account.
7. Children
The Service is not for anyone under 18. We do not knowingly collect data from minors.
8. Contact
Privacy questions or requests: fabricationsbyfoster@gmail.com.