Privacy Policy

1. Who We Are

AI Spark ("we", "us", "our") is a trading signal platform at www.aisparktrade.com. We provide algorithmic market signal analysis for educational and informational purposes. This Privacy Policy explains how we collect, use, and protect your personal information.

For privacy questions contact us at: support@aisparktrade.com

2. Information We Collect

We collect the following personal information when you use AI Spark:

• Email address — Required to create your account and send account-related notifications.
• Password — Stored as a one-way bcrypt hash. We cannot read your password.
• Phone number — Optional. Used only for account contact if you provide it.
• Payment information — Processed securely by Stripe. We never see or store your full card number. We store only Stripe's customer ID and subscription ID to manage your plan.
• IP address — Logged temporarily per scan request for rate limiting and fraud prevention. Not stored long-term.
• Scan activity — We record how many scans you run per day to enforce plan limits.
• Trade journal entries — If you use the Trade Journal, your logged trades (instrument, direction, P&L, notes) are stored and associated with your account.
• Signal interaction data — Win/loss outcomes you report on signals are stored to improve signal quality. This data is not linked to any third party.
• Referral code — If you use a referral link, we track which code was used to credit the referrer.

3. How We Use Your Information

• Account management — Logging you in, managing your subscription, enforcing plan limits.
• Payment processing — Billing via Stripe, sending payment receipts, managing cancellations.
• Service emails — Account confirmation, subscription reminders, trial expiry warnings. You will not receive marketing emails unless you opt in.
• Signal quality improvement — Aggregated, anonymised outcome data helps us tune the scanner algorithm. Individual trade data is never shared.
• Security — IP-based rate limiting to prevent abuse. Login attempts are monitored to detect brute-force attacks.
• Referral tracking — To credit referrers with free weeks when their referrals subscribe.

4. Data Sharing & Third Parties

We do not sell, rent, or share your personal information with advertisers or data brokers. We share data only with the following trusted services required to operate the platform:

• Stripe — Payment processing and subscription management. Stripe Privacy Policy →
• Resend — Transactional email delivery (account emails only). Resend Privacy Policy →
• Railway — Cloud hosting provider where the application and database run. Railway Privacy Policy →
• yfinance / Market data providers — Public market data is fetched from external APIs. No personal data is sent to these services.

We may disclose your information if required by law, court order, or to protect the safety and rights of our users.

5. Data Storage & Security

• Your data is stored in an encrypted SQLite database hosted on Railway's secure cloud infrastructure in the US West region.
• Passwords are hashed using bcrypt with a unique salt — they are mathematically impossible to reverse.
• All connections to AI Spark are encrypted via HTTPS/TLS.
• Session cookies are marked HttpOnly and SameSite=Lax to prevent cross-site attacks.
• Payment data never touches our servers — all card processing is handled directly by Stripe's PCI-DSS compliant infrastructure.
• We do not store credit card numbers, CVVs, or full card details anywhere on our systems.

6. Your Rights

You have the following rights regarding your personal data:

• Access — Request a copy of all data we hold about you.
• Correction — Update your email, phone, or password via the Settings page at any time.
• Deletion — Request full deletion of your account and all associated data. Email us at support@aisparktrade.com and we will process it within 7 business days.
• Data portability — Export your Trade Journal as CSV directly from the Journal page.
• Opt out of emails — Reply "unsubscribe" to any email or contact support and we will remove you from all non-essential communications.

If you are located in the European Economic Area (EEA), you have additional rights under GDPR including the right to lodge a complaint with your local supervisory authority.

7. Cookies

AI Spark uses only essential session cookies — no advertising cookies, no tracking pixels, no third-party analytics. The session cookie keeps you logged in and expires when you close your browser or log out. We do not use Google Analytics, Facebook Pixel, or any other behavioural tracking.

8. Data Retention

• Active accounts — Your data is retained while your account is active.
• Cancelled accounts — After subscription cancellation, your account data is retained for 90 days so you can reactivate, then permanently deleted.
• Deletion requests — Honoured within 7 business days. Stripe may retain payment records separately per their legal obligations.
• Scan logs — Aggregate scan counts are retained for up to 12 months for service improvement. Individual IP logs are not stored beyond the session.

9. Children's Privacy

AI Spark is intended for users aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify active subscribers by email. Continued use of AI Spark after changes constitutes acceptance of the updated policy.