Privacy Policy

Introduction

ScanTrade (we, us, or our) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the ScanTrade platform and related services (Service). By using the Service, you consent to the data practices described here.

Data Controller

ScanTrade is the data controller for the personal data collected through the Service. For privacy-related inquiries, contact us at support.scantrade@gmail.com.

Data We Collect

We collect the following categories of data:

  • Account information: username, email address, and password (stored as a secure hash — never in plain text).
  • Subscription and billing data: plan type, subscription status, and payment references (processed by Stripe — we do not store full card details).
  • Usage data: scan history, trade journal entries, watchlist items, analysis results, and in-app activity.
  • Technical data: IP address, browser type and version, device type, operating system, and session identifiers.
  • Communications: messages sent to us for support or feedback.

How We Use Your Data

We use collected data for the following purposes:

  • To create and manage your Account and provide the Service.
  • To process payments and manage your Subscription via Stripe.
  • To apply usage credits, track overages, and generate invoices.
  • To improve and develop the Service, including AI model training on anonymised aggregate data.
  • To send transactional communications (account confirmations, payment receipts, service updates).
  • To prevent fraud, enforce our Terms of Service, and comply with legal obligations.
  • To respond to support requests and feedback.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your data on the following legal bases:

  • Art. 6(1)(b) GDPR — Performance of a contract: to provide the Service you signed up for.
  • Art. 6(1)(c) GDPR — Legal obligation: where processing is required by applicable law.
  • Art. 6(1)(f) GDPR — Legitimate interests: to improve the Service, prevent fraud, and ensure security.
  • Art. 6(1)(a) GDPR — Consent: where you have given explicit consent (e.g., optional cookies or marketing).

Payment Processing via Stripe

We use Stripe for payment processing. When you subscribe, payment data (card details, billing address) is collected directly by Stripe and is subject to Stripe's Privacy Policy (https://stripe.com/privacy). We receive only a payment reference and subscription status. Stripe may transfer data internationally under Standard Contractual Clauses (SCCs).

Cookies and Local Storage

We use session storage and local storage for authentication tokens and user preferences. We do not use third-party advertising or tracking cookies by default. If we introduce optional analytics or preference cookies, we will obtain your explicit consent via our cookie banner. See our Cookie Policy for full details.

Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

  • Stripe — for payment processing.
  • Cloud infrastructure providers — for hosting and data storage (servers may be located in the USA; data transfers are governed by Standard Contractual Clauses).
  • Law enforcement or regulatory authorities — where required by law or to protect our legal rights.
  • Successors in interest — in the event of a merger, acquisition, or sale of assets (you will be notified).

International Data Transfers

The Service is hosted on cloud infrastructure which may be located in the United States or other countries outside your jurisdiction. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain your account and trading records while your Account is active. Operational records follow defined limits: usage events are kept for 24 months, product analytics for 12 months, webhook logs for 6 months, news cache records for 90 days, and password-reset requests for 7 days. When you confirm account deletion, user-owned records are deleted immediately where technically possible. Stripe retains payment and tax records for the periods required by law; we retain only payment references and subscription state locally.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you.
  • Rectification — request correction of inaccurate data.
  • Erasure — request deletion of your data ('right to be forgotten').
  • Restriction — request that we restrict processing of your data.
  • Data portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdrawal of consent — withdraw consent at any time where processing is based on consent.

How to Exercise Your Rights

To exercise any of the rights listed above, contact us at support.scantrade@gmail.com. We will respond within the timeframe required by applicable law (typically 30 days). We may need to verify your identity before processing your request.

Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal data against unauthorised access, disclosure, alteration, or destruction. However, no security system is completely impenetrable. We will notify you and relevant authorities of any data breach as required by law.

Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the Last updated date. Continued use of the Service after changes constitutes acceptance.

Contact and Complaints

For privacy questions or to lodge a complaint, contact us at support.scantrade@gmail.com. If you are located in the EU and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.