Privacy Policy

Last updated: 2026-04-20.

1. Data we collect

• Account data: email, display name, password hash (bcrypt).
• Social login: provider subject id + email from Google / Apple / Facebook.
• Payment data: processor transaction ids only — we never store full card numbers.
• Usage data: viewed lives, course progress, IP addresses (rate-limit + fraud), user-agent.
• Funnel linkage: we may link your TTA account with an existing Trading Talents community user if emails match, to unify your experience across the ecosystem.

2. How we use it

To provide the service (authenticate, deliver content, process payments), comply with legal obligations, and prevent fraud/abuse. We do not sell personal data.

3. Sharing

Payment processors (Stripe, PayPal, Binance Pay) receive the minimum data needed to complete your purchase. YouTube embeds content per their own privacy policy. We do not share data with third parties for advertising.

4. Retention

Account data: kept while your account is active. Payment ledgers and audit logs: retained 7 years for tax and compliance. You may request deletion of your account at privacy@trading-talents.com; ledger entries are anonymized rather than deleted to preserve financial integrity.

5. Your rights

Access, correction, deletion, portability, objection and restriction (where applicable under GDPR / local law). Request via privacy@trading-talents.com.

6. Security

All sensitive tokens are encrypted at rest (Fernet with a platform-wide key). Transport is HTTPS with HSTS. Access to production databases is restricted to authorized personnel.

7. Cookies

We use a single HttpOnly session cookie (`academy_token`) for authentication. No tracking cookies.