Privacy Policy

1.1 Information You Provide

• Email address — collected via our authentication provider when you create your account.
• Brokerage connection credentials — if brokerage connection functionality is available to you, you may provide API credentials or authorize a supported OAuth connection. We process the credentials supplied or returned by that integration, including an OAuth access token when applicable, only for the connection purposes available to your account.
• Payment information — collected and processed by our payment processor when you subscribe. We never see, receive, or store your full credit card numbers, CVV, or bank account numbers.
• Support communications — any information you provide when contacting us for support.

1.2 Brokerage Account and Trading Data We Process

When you link a supported brokerage account, we may retrieve and process account information, positions, orders, and eligible market data as necessary for the connection functionality available to you.

1.3 Service Preferences and Subscription Records We Store

We store Service preferences and subscription records, such as saved preferences, watchlists, quick-order settings, Stripe customer or subscription identifiers, and subscription status.

1.4 Information Collected Automatically

When you use the Service, we may automatically collect technical information including browser type and version, IP address, device and operating system information, pages and features accessed within the Service, actions taken (such as orders placed and positions viewed), and session and usage data. This data is used to maintain and improve the Service and is not sold to third parties.

1.5 Cookies and Browser Storage

We use Clerk to provide sign-up, sign-in, and account authentication. Clerk uses cookies required for those services to function.

We may use browser storage to remember Service preferences and support temporary session functionality.

When you use Stripe Checkout or the Stripe billing portal, Stripe may use cookies and similar technologies in connection with its services.

You can control cookies and browser storage through your browser settings. Blocking essential cookies or browser storage may prevent some Service features from working as expected.

We use the information we collect to:

• Create, manage, and authenticate your account;
• Link a supported brokerage account and provide the account, market-data, and user-directed order functionality available for that connection;
• Process your subscription payments and manage billing;
• Communicate with you about your account, billing, security notices, and changes to the Service;
• Provide customer support and respond to your inquiries;
• Monitor, maintain, debug, and improve the performance and security of the Service;
• Detect, investigate, and prevent fraudulent, abusive, or unlawful activity;
• Comply with applicable legal and regulatory obligations.

We do not use your information for advertising purposes. We do not sell your personal data to anyone.

3.1 Storage

Your data is stored using our cloud database provider. Access to the database is restricted to authorized personnel and secured with industry-standard authentication and access controls.

3.2 Encryption of Brokerage Connection Credentials

Brokerage connection credentials are encrypted using industry-standard encryption before storage. They are decrypted in memory only when needed for the connection purposes available to you, are never logged in plaintext, and are transmitted only to the brokerage integration provider that issued or accepts them.

3.3 Payment Data

We do not store your credit card numbers, CVV codes, or full payment details. All payment processing is handled directly by our third-party payment processor.

3.4 Security Measures

We implement commercially reasonable security measures including encryption in transit (HTTPS/TLS), encryption at rest for sensitive credentials, restricted database access, and secure authentication. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We may use service providers that process personal information as necessary to operate, secure, and improve the Service. Depending on how you use the Service, these providers may include:

• Authentication provider: handles user account creation and login.
• Cloud database provider: stores account data, Service preferences, subscription records, and encrypted credentials.
• Payment processor: handles subscription billing. We do not store your full credit card numbers, CVV codes, or bank account numbers.
• Brokerage integration provider: when connection functionality is available, verifies or links the account and may provide account or market data or receive user-directed trading instructions according to the enabled connection.
• Caching and infrastructure providers: support Service performance, availability, and security.

We do not sell, rent, or trade your personal data. We may disclose information as required by law, including in response to valid legal process, or as necessary to protect the rights, property, or safety of Drakonsynth, our users, or the public.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you;
• Correction — request correction of inaccurate or incomplete data;
• Deletion — request deletion of your personal data, subject to legal retention requirements.

To exercise any of these rights, including a request to delete your account, contact us at support@drakonsynth.com.

We retain personal information only as long as reasonably necessary to operate and secure the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

The Service is not intended for, marketed to, or directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have inadvertently collected data from a person under 18, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at support@drakonsynth.com.

The Service may be available only in jurisdictions where Drakonsynth and its applicable third-party providers may lawfully provide their respective services. Drakonsynth does not open or maintain brokerage accounts, and availability may depend on your location, account eligibility, provider availability, and applicable law.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. For material changes, we will notify you by email or via a notice within the Service prior to the changes taking effect. Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@drakonsynth.com.