WhatToTrade ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share information about you when you use our platform and services.
By using WhatToTrade, you agree to the collection and use of information as described in this policy. This policy applies to all users of the WhatToTrade platform, including free and paid subscribers.
| Category | Examples | Why We Collect It |
|---|---|---|
| Account Information | Name, username, email address, password | To create and manage your account |
| Profile Information | Phone number, billing address | For invoice generation and billing |
| Portfolio Data | Stock symbols, share counts, purchase prices | To provide portfolio tracking features |
| Alert Preferences | Price targets, notification settings | To deliver alerts you configure |
| Payment Information | Billing address, payment method tokens | To process subscription payments |
| Communications | Messages to support | To respond to your requests |
| Category | Examples | Purpose |
|---|---|---|
| Device Information | Browser type, operating system, device type | Security, session management |
| Log Data | IP address, pages visited, timestamps, actions taken | Security, abuse prevention, debugging |
| Session Data | Authentication tokens, session identifiers | Keeping you logged in |
| Usage Data | Features used, click patterns, frequency of use | Service improvement |
We use the information we collect to:
We will not use your portfolio data or financial information to trade on our own behalf or share it with third parties for their financial gain.
We do not sell, rent, or trade your personal information. We share information only as described below:
We share data with trusted third-party vendors who help us operate the Service. These include:
| Provider | Purpose | Data Shared |
|---|---|---|
| OpenAI | AI-generated stock analysis and portfolio advice | Portfolio symbols and market context (no personal identifiers) |
| Finnhub | Market data and stock information | Ticker symbols only |
| Stripe | Payment processing | Billing information, payment tokens |
| PayPal | Payment processing | Billing information, payment tokens |
| SMTP provider | Email delivery | Email address, email content |
| MongoDB Atlas | Database hosting | All account and usage data |
All service providers are contractually bound to protect your data and may only use it for the purposes we specify.
We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety and that of our users.
If WhatToTrade is acquired by or merged with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
We do not store full credit or debit card numbers on our servers. All payment card processing is handled by Stripe, and PayPal account information is managed by PayPal. We store only tokenized payment references (which cannot be used to make charges without our secure keys) and billing addresses for invoice generation.
Your payment information is encrypted in transit and at rest. Our payment processors are PCI-DSS compliant.
When you use AI features (top picks, portfolio advisor, sports analyzer), we transmit relevant context to OpenAI's API. This context includes market data and portfolio information but does not include your name, email, or other direct personal identifiers. OpenAI's data processing is governed by their privacy policy and API data usage policies.
Market data is sourced from Finnhub and other providers. This data is provided for informational purposes only and may be delayed or inaccurate. We do not control the accuracy of third-party market data.
We use the following types of cookies and local storage:
We do not use third-party advertising cookies, behavioral tracking pixels, or social media trackers. We do not use Google Analytics or similar services.
We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except:
We implement industry-standard security measures to protect your information, including:
Despite these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your information. In the event of a data breach that affects your rights, we will notify you as required by applicable law.
You can access and update your account information at any time through your Profile settings.
You can opt out of marketing and summary emails at any time using the unsubscribe link in any email we send, or by updating your notification preferences in your Profile. You cannot opt out of essential transactional emails (invoices, payment receipts, password resets, security alerts).
You may request deletion of your account and associated data by contacting us through the platform. We will process your request within 30 days, subject to our legal retention obligations.
If you are a California resident, you have the right to: know what personal information we collect; request deletion of your personal information; opt out of the sale of personal information (we do not sell personal information); and not be discriminated against for exercising these rights.
If you are located in the European Union or United Kingdom, you have additional rights including: the right to access, rectify, or erase your personal data; the right to restrict or object to processing; the right to data portability; and the right to lodge a complaint with your local supervisory authority. Our legal basis for processing your data is primarily contract performance and legitimate interests.
The Service is not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it promptly.
WhatToTrade is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.
We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the Service at least 14 days before the changes take effect. We encourage you to review this policy periodically.
For privacy questions, data requests, or to exercise your rights, please contact us through the platform. We aim to respond to all privacy requests within 30 days.