Privacy Policy

SteadyTrader LLC (“SteadyTrader,” “we,” “us”) is responsible for the personal information described here. We are based in Michigan, United States. This Policy covers our Services and does not replace the separate privacy notices of linked websites, payment pages, charting platforms or other services you choose to use.

We collect information to operate the Services, manage accounts and payments, protect users, and meet legal obligations. We do not sell personal information or use advertising pixels, third-party analytics, session replay or error-tracking SDKs on our sites.

We receive information you provide, information generated through use of the Services, and information from payment, identity and linked-service providers. Collection depends on the features you use.

Some information is required to create or secure an account, complete a purchase, or meet payout and tax requirements. Without it, we may be unable to provide the corresponding feature or payment. Optional communications, community links and notifications can be left unused.

We do not collect your contacts or track browsing on other websites. Infrastructure processes network addresses to deliver and protect the Services. Our application generally uses secret-salted hashes for retained security identifiers rather than raw network addresses. Protected hashes may still be personal information; they do not guarantee anonymity.

• Provide and support the Services, authenticate users, manage entitlements and deliver requested features.
• Process purchases, subscriptions, refunds, referrals and affiliate payout requirements.
• Protect accounts and systems, prevent abuse and fraud, and investigate errors or incidents.
• Send service messages, requested alerts and permitted marketing communications.
• Maintain tax, accounting and agreement records, respond to lawful requests, and exercise or defend legal rights.

We do not use personal information for advertising profiles or make decisions with legal or similarly significant effects solely through automated decision-making. Automated security controls may temporarily restrict attempts or access to prevent abuse.

Where applicable law requires a legal basis, we rely on contract performance for accounts and purchased features; legitimate interests in operating and protecting the Services; legal obligations, such as tax and accounting requirements; and consent where required for optional communications or features. Withdrawal does not affect processing that was lawful before consent was withdrawn.

We share information when needed for the purposes described here, including with:

• Service providers that host the Services, manage authentication and private storage, deliver messages, process payments and protect our systems. They receive information needed for their functions. Stripe handles checkout and hosted affiliate identity, bank and tax-information collection.
• AI and linked services when you use them. The assistant sends submitted content to Google’s Gemini API. Optional community links, embedded media and charting platforms are also subject to the relevant service’s privacy notice.
• Other members or recipients when you publish or share content. Gallery layouts are visible to signed-in members with your username; permitted recipients can import shared configurations. Removing the source or revoking its link does not erase imported copies. Sharing does not grant access to your account or market-data entitlements.
• Advisers, authorities or other parties where necessary to meet legal obligations, investigate fraud, protect rights and safety, or pursue or defend legal claims.
• A business successor in a sale, merger or reorganization, subject to applicable law and the privacy obligations governing the information, or others with your direction or consent.

We do not sell personal information or share it for cross-context behavioral advertising. There is currently no sale or advertising sharing to opt out of. If practices change, we will update this Policy and honor applicable opt-out rights, including recognized Global Privacy Control signals.

The assistant uses Google’s Gemini API. We send your messages and recent conversation to Google to generate replies. In the signed-in terminal, limited information about the view, symbol, expiry and feed status is also sent. The public homepage assistant does not receive terminal context.

We do not automatically attach account records or exact market values. Anything you type, including personal information, may be sent, so do not enter sensitive or confidential information. We do not retain conversations on our servers; history remains in the open page and can be cleared.

Google’s handling, retention and possible use of content to improve its services depend on the applicable Gemini API terms and service tier. Replies can be wrong and are not financial, investment, tax or legal advice. The assistant is for adults.

We use first-party cookies for sign-in, security, referral attribution and billing synchronization. Browser storage keeps product preferences and configurations. Payment, security and embedded-media services may use their own cookies when their features load. The Cookie Policy describes purposes, lifetimes and controls. Blocking essential storage may prevent some features from working.

Retention depends on the information, the feature and our legal or operational obligations. Current periods and exceptions include:

• Account and product records generally remain while your account exists. Deletion removes ordinary profile, settings and access records, subject to the retained evidence and obligations below.
• Billing and commission records are retained for seven years after the transaction, including after account deletion. Payment providers apply their own policies.
• Signed affiliate program documents and non-sensitive signature and tax-review evidence remain after account deletion for tax, accounting, payment and agreement obligations. These records currently have no automatic deletion schedule; you may request a retention review. Stripe applies its own retention policy to the tax details and certifications it holds.
• Sign-in sessions last no more than twelve hours. Verification credentials and abuse counters have shorter, purpose-specific lifetimes. Minimal fraud-prevention and trial-use identifiers remain after deletion to enforce once-only eligibility. Unsubmitted checkout attempts are removed 30 days after expiry; submitted or uncertain purchases remain for payment recovery.
• Device history lasts up to 90 days after last use, removed notification registrations up to 30 days, and fired alert history up to 180 days. Email delivery records and audit logs last up to 24 months; deleted-account email addresses are replaced with one-way hashes in delivery records. Infrastructure logs and backups age out on provider schedules.
• Waiting-list records remain through the launch announcement and discount period, ordinarily 30 days after launch. Unsubscribe suppression records remain until you request erasure so repeated signup does not restart marketing.
• Denied affiliate applications remain for 90 days after the decision. Support correspondence and pending or approved applications remain in business records until deletion is requested, subject to legal obligations.

We use safeguards appropriate to the information, including encrypted transport, access controls, password hashing, protected sign-in cookies, verification and abuse limits. Affiliate program documents use private storage and authenticated access. No system is perfectly secure. We investigate incidents and provide legally required notifications when a breach affects personal information.

Depending on applicable law, you may request access or a copy, correction, deletion, restriction, portability, withdrawal of consent, or objection to certain uses. Rights can be subject to verification and lawful exceptions, including tax records, fraud prevention and legal claims.

Email support@steadytrader.co with the subject “Privacy request” from your account address. We will verify your identity and respond within the applicable legal deadline. We aim to respond within 30 days; EEA and UK requests generally require one calendar month, and other jurisdictions can have different periods. We will explain any lawful extension and its reason. Authorized agents may submit requests where permitted, with appropriate authority and verification.

You can manage profile details, verification methods, alerts and billing through your account. Account → Security → Delete account permits deletion after required authentication. Active subscriptions are cancelled first; an unresolved cancellation prevents deletion from completing. Deletion does not remove legally retained payment, program-document or tax-review records. Marketing opt-out is available in marketing messages.

We will not discriminate against you for exercising a privacy right. If we decline a request, you may ask us to reconsider by replying to the decision. Applicable law may also provide a right to complain to a regulator.

The categories described above include identifiers, customer and commercial records, network activity, and sensitive information such as login credentials and tax IDs in uploaded IRS certifications. Sources, purposes, recipient categories and retention are described in the corresponding sections. Sensitive information is used for requested services, security and legal obligations, rather than advertising or profiling.

Where the CCPA/CPRA applies, rights include access, correction, deletion, limiting certain sensitive-information uses and opting out of sale or sharing, subject to applicable exceptions. We do not sell or share information for cross-context behavioral advertising, including children’s information. Use the request process above, directly or through an authorized agent. We do not disclose personal information to third parties for their own direct marketing.

SteadyTrader LLC is the controller. Applicable rights include access, correction, erasure, restriction, objection and portability, and complaints to your local supervisory authority. In the UK, that authority is the Information Commissioner’s Office. Our legal bases are described above.

We and our providers process information in the United States, where protections may differ from those in your location. Cross-border processing must meet applicable transfer requirements. Provider certification alone does not establish that every transfer is covered; SteadyTrader itself is not certified under the Data Privacy Framework. Contact us for information about the safeguards applicable to a transfer or request.

The Services are for adults aged 18 and over. We do not knowingly collect children’s personal information. If you believe a child has provided information, email support@steadytrader.co so we can investigate and remove it as required.

Waiting-list signup requests a confirmation and launch announcement, including the advertised launch offer. We may also send permitted subscription-related offers. Marketing messages include an unsubscribe link; we retain an opt-out record to prevent unwanted re-enrollment. You can ask support to review that preference or erase the record.

Unsubscribing from the waiting list also removes you from the launch announcement that carries the discount. A repeated signup does not undo an opt-out. Receipts, security messages, subscription notices and requested alerts are service communications; alert emails can be managed in alert settings.

We update this Policy and its date when practices change. Material changes will be communicated as required by law, through the Services or by email. Where a change requires consent, we will seek it before relying on that consent.

Privacy questions and requests: support@steadytrader.co. SteadyTrader LLC, Michigan, United States.