Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information. Your name (optional), email address, and password (stored only as a secure hash). If you sign in with Google, we receive basic profile information from Google such as your email and name.
• Trading data. Transaction history, positions, symbols, quantities, prices, and related records that you import via file upload or that are synced from a brokerage or exchange account you connect. This connection is read-only.
• Content you create. Journal entries, notes, strategy tags, and settings.
• Billing information. Subscription status and plan. Payment card details are collected and processed directly by our payment processor (Stripe); we do not store your full card number.
• Usage and device data. Log data such as IP address, browser type, pages viewed, and timestamps, collected to operate, secure, and improve the Service.

2. How we use information

We use information to:

• provide, maintain, and improve the Service and its analytics;
• create and secure your account and authenticate you;
• process subscriptions, billing, and free trials;
• send transactional messages such as email verification, password resets, receipts, and important account or Service notices;
• respond to support requests;
• detect, prevent, and address fraud, abuse, and security issues; and
• comply with legal obligations.

We do not sell your personal information, and we do not use your trading data to train machine-learning models for third parties.

3. How we share information

We share information only as needed to run the Service, and with service providers bound to protect it:

• Payment processing — Stripe, to process subscriptions and payments.
• Brokerage/exchange connectivity — a third-party aggregation provider that enables read-only syncing of your trading activity, when you choose to connect an account.
• Infrastructure and database hosting — cloud hosting and managed-database providers used to run and store the Service.
• Email delivery — an email provider used to send transactional messages.
• Authentication — Google, if you choose to sign in with Google.

We may also disclose information to comply with law or legal process, to enforce our Terms, to protect the rights, safety, or property of Praxis or others, or in connection with a merger, acquisition, or sale of assets (with notice where required).

4. Data security

We use technical and organizational measures to protect your information, including encryption in transit, hashed passwords, and database access controls that isolate each account’s data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

5. Data retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data as described below; some records may be retained where required by law (for example, billing records).

6. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update your email from your account settings, disconnect a brokerage connection at any time, and request account deletion by contacting us. We will respond consistent with applicable law. You can opt out of non-essential communications; we may still send transactional messages necessary to operate your account.

7. Cookies

We use strictly necessary cookies and similar technologies to keep you signed in, remember your preferences, and secure the Service. We do not use them to sell your data.

8. Children’s privacy

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

9. International users

Praxis is operated from the United States, and your information may be processed there. By using the Service, you understand that your information may be transferred to and processed in the United States and other locations where our providers operate.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice. The “Last updated” date above reflects the current version.

11. Contact

Questions or requests about your privacy? Contact us at support@praxisrisk.app. See also our Terms of Service.