Privacy Policy

TradeClips ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, name, profile picture (via Google OAuth or email signup)
• Payment Information: Billing details processed through Stripe (we do not store credit card numbers)
• User Content: Clipped articles, notes, investment ideas, trading journal entries, portfolio data
• Brokerage Credentials: Tokens for connecting brokerage accounts (via Snaptrade)

1.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent, clicks
• Device Information: Browser type, operating system, IP address
• Cookies: Authentication tokens, session data, preferences

1.3 Third-Party Data

• Brokerage Data: Portfolio holdings, transactions, account values (via Snaptrade)
• Article Content: Content from web pages you clip
• OAuth Data: Profile information from Google (if you use Google Sign-In)

1.4 Browser Extension Data

The TradeClips browser extension collects data only when you explicitly clip content:

• Page URL: The URL of the page you clip
• Page Content: Article text, title, author, and metadata extracted from the page
• PDF Content: Text extracted from PDF documents you clip
• Social Media Content: Tweet text, Reddit posts/comments when you clip from those platforms
• Authentication Token: Stored locally in the browser to keep you logged in

The extension does NOT:

• Collect browsing history
• Track pages you visit
• Send any data without your explicit action (clicking the clip button)
• Access data from pages you don't clip
• Run in the background when not in use

2. How We Use Your Information

We use your information to:

• Provide the Service: Display portfolio data, organize research, generate summaries
• Authenticate You: Manage your account and secure access
• Process Payments: Handle subscriptions and billing
• Generate AI Features: Create digests, power chat search (via Google Gemini)
• Improve the Service: Analyze usage patterns, fix bugs, develop features
• Communicate: Send service updates, security alerts, marketing (with your consent)
• Comply with Law: Respond to legal requests, prevent fraud, enforce terms

3. How We Share Your Information

We do not sell your personal information. We share data only in these cases:

3.1 Service Providers

• Supabase: Database, authentication, file storage
• Google Gemini: AI search and digest generation (only content you explicitly enable for AI features)
• Snaptrade: Brokerage account aggregation (with your explicit authorization)
• Stripe: Payment processing
• Cloudflare: CDN and DDoS protection

3.2 Legal Requirements

We may disclose information if required by law, subpoena, court order, or to:

• Comply with legal obligations
• Protect our rights and property
• Prevent fraud or abuse
• Protect user safety

3.3 Business Transfers

If TradeClips is acquired or merged, your information may be transferred to the new owner. We will notify you of any such change.

4. Data Security

We implement security measures to protect your data:

• Encryption: HTTPS/TLS for data in transit, encryption at rest in Supabase
• Row-Level Security: Database policies ensure users can only access their own data
• Authentication: Secure authentication via Supabase Auth (OAuth, email/password)
• Access Controls: Limited employee access to production data
• Regular Updates: Security patches and dependency updates

However, no system is 100% secure. You are responsible for maintaining the security of your account credentials.

5. Data Retention

We retain your data:

• Active Accounts: As long as your account is active
• Deleted Accounts: 30 days after deletion (for recovery), then permanently deleted
• Legal Compliance: Longer if required by law (e.g., payment records for tax purposes)
• Aggregated Data: Anonymized usage analytics may be retained indefinitely

6. Your Rights

6.1 Access & Portability

You can access and export your data at any time through the app settings.

6.2 Correction

You can update your account information and content directly in the app.

6.3 Deletion

You can delete your account from settings. This will permanently delete your data after 30 days.

6.4 Opt-Out

• Marketing: Unsubscribe via email links or account settings
• Digests: Disable in settings
• AI Features: Don't enable Chat or Digests (clips won't be sent to Gemini)

6.5 California Residents (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold (we don't sell data)
• Right to delete personal information
• Right to non-discrimination for exercising your rights

6.6 European Residents (GDPR)

If you are in the EU/EEA/UK, you have rights under GDPR:

• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Right to lodge a complaint with a supervisory authority

7. Cookies & Tracking

We use cookies for:

• Essential: Authentication, security, session management (required)
• Analytics: Usage patterns, feature adoption (optional)
• Preferences: Theme, language, settings (optional)

You can control cookies through your browser settings. Disabling essential cookies will prevent you from using TradeClips.

8. Children's Privacy

TradeClips is not intended for users under 18. We do not knowingly collect information from children. If we discover we have collected data from a child, we will delete it immediately.

9. International Data Transfers

Your data is stored in the United States (via Supabase). If you access TradeClips from outside the U.S., your data will be transferred to and processed in the U.S.

10. Third-Party Links

TradeClips may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Please review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use after changes constitutes acceptance.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by law.