Privacy Policy

1. Who we are

SmartTrace operates a US options structure platform. For privacy requests, contact support@smrttrace.com.

2. Information we collect

We collect information needed to operate accounts, provide the Service, bill (when applicable), support you, and keep the Service secure.

Information you provide:

• Account details such as email address and password (passwords are stored in hashed form by our authentication provider)
• Profile or preference information you choose to save in the product
• Communications you send us (support, feedback, beta comments)

Subscription and payment data (when you subscribe):

• Plan, billing interval, subscription status, and transaction or customer identifiers from our payment provider
• Limited billing metadata such as billing country or tax region when supplied by the processor
• We do not store full payment-card numbers. Card data is handled by PCI DSS–compliant processors (currently including Stripe, and other processors we may use)

Information collected automatically:

• Device and browser information, IP address, approximate location derived from IP, timestamps, and diagnostic logs
• Usage data such as pages viewed, features used, tickers or boards you open, and similar product events
• Cookies and similar technologies required for login, session integrity, and security

3. How we use information

We use personal information to:

• Create and authenticate your account and provide the Service
• Remember product preferences (for example theme or last-used views)
• Process subscriptions, invoices, renewals, cancellations, and access rights
• Send service messages such as security notices, beta or billing updates, and responses to your requests
• Understand how the product is used so we can improve it
• Detect fraud, abuse, security incidents, and violations of our Terms of Service
• Comply with law, accounting, tax, and dispute-resolution obligations

We do not sell or rent your personal information, and we do not use it for third-party behavioral advertising.

4. Sharing and processors

We share personal information only as needed to operate the Service or as required by law. Recipients may include:

• Infrastructure and authentication providers (including Supabase for database and auth, and Vercel for hosting)
• Payment processors or merchants of record (including Stripe)
• Product analytics (PostHog), used to understand feature usage — not to sell ads
• AI providers we use to generate in-product text
• Market-data and related vendors that supply the underlying data we display; they typically receive operational traffic, not your identity, except where technically required
• Professional advisers, or authorities, when disclosure is required by law or necessary to protect rights, safety, or the integrity of the Service

These providers process data under their own terms. We do not transfer personal information to third parties for their independent marketing.

5. Cookies and analytics

We use first-party cookies that are necessary for authentication, session management, CSRF protection, and security. Blocking these cookies may prevent login and other core features from working.

We use PostHog for product analytics. Events may include page path, product module, ticker or board identifiers, and subscription or beta status. We associate logged-in usage with an account identifier. Analytics events are not designed to include your email, name, or payment-card number. We do not use third-party advertising cookies or cross-site behavioral advertising pixels.

6. Data retention

We retain personal information only as long as reasonably needed for the purposes in this Policy, including:

• Account data while your account is active, and for a limited period after closure unless a longer period is required by law
• Subscription and transaction records for the period required by tax and accounting rules (often up to seven years)
• Security and server logs for a shorter operational window, typically up to ninety (90) days, unless an investigation requires longer retention
• Support correspondence for a reasonable period after the request is closed

7. Security

We use commercially reasonable technical and organizational measures, including encryption in transit (HTTPS/TLS), managed database controls, access restrictions, and infrastructure hosted by established providers. No method of transmission or storage is completely secure. You are responsible for keeping your password confidential. If a personal-data incident requires notice under applicable law, we will provide notice as required.

8. International processing

The Service is operated globally and uses infrastructure that may process information in the United States and other countries, where data-protection laws may differ from those in your country of residence. By using the Service, you understand that your information may be transferred to and processed in those locations.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to certain processing of your personal information, to request a portable copy, and to lodge a complaint with a supervisory authority. You may also cancel a subscription and opt out of non-essential product emails.

To make a request, email support@smrttrace.com. We may need to verify your identity before responding. Some records (for example billing records) may be retained where the law requires it even after an account is closed.

10. Email communications

We may send transactional email that is necessary to operate your account (security, billing, material product notices). Where we send optional product updates, you can unsubscribe using the link in the email or by contacting us. Transactional messages may still be sent as needed to provide the Service.

11. Children’s privacy

The Service is not directed to anyone under eighteen (18). We do not knowingly collect personal information from children. If you believe a minor has provided information to us, contact support@smrttrace.com and we will delete it promptly where required.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest revision. Material changes will be communicated by email or by notice on the Service where practical. Continued use of the Service after an update means you acknowledge the revised Policy.

13. Contact

Privacy questions and requests: support@smrttrace.com