Privacy Policy

Last Updated: March 2026

GoldTracker.ai ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at www.goldtracker.ai (the "Service"). Please read this policy carefully.

1. Information We Collect

1.1 Personal Information You Provide

When you create an account or use our Service, we may collect the following personal information:

Data Type	Examples	Purpose
Account Information	Full name, email address, password (hashed)	Account creation and authentication
Payment Information	Processed by Stripe; we do not store full card numbers	Subscription billing
Profile Data	Trading preferences, notification settings	Personalization of Service
Communication Data	Emails, support messages	Customer support

1.2 Information Collected Automatically

When you access the Service, we automatically collect certain information:

Usage Data: Pages visited, features used, time spent, click patterns, and interaction data
Device Information: Browser type, operating system, device type, screen resolution
Log Data: IP address, access times, referring URLs, error logs
Trading Activity: Paper trading positions, watchlist selections, alert configurations, and trade history within the platform

1.3 Information from Third-Party Authentication

If you sign in using Google OAuth, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.

2. How We Use Your Information

We use the information we collect for the following purposes:

Account Management: To create, maintain, and secure your account
Service Delivery: To provide real-time market data, AI signals, paper trading, and all platform features
Service Improvement: To analyze usage patterns, fix bugs, and improve features and performance
Communication: To send transactional emails (verification codes, password resets, billing receipts), service updates, and optional marketing communications
Security: To detect and prevent fraud, unauthorized access, and abuse
Legal Compliance: To comply with applicable laws, regulations, and legal processes

3. Third-Party Services

We use the following third-party services that may have access to your information:

Service	Purpose	Data Shared
Stripe	Payment processing	Payment method details, billing address, email
Google OAuth	Authentication	Name, email (provided by Google upon your consent)
Resend	Transactional email delivery	Email address, email content
Railway	Cloud hosting infrastructure	Application data (encrypted at rest and in transit)

Each third-party service operates under its own privacy policy. We encourage you to review their respective policies. We do not control and are not responsible for the privacy practices of third-party services.

4. Cookies and Local Storage

We use the following browser storage technologies:

Authentication Tokens: Stored in localStorage to maintain your login session
User Preferences: Stored in localStorage to remember your dashboard layout, theme settings, and notification preferences
Paper Trading Data: Stored locally to maintain your virtual portfolio state

We do not use third-party tracking cookies for advertising purposes. You can clear localStorage through your browser settings, but this will require you to log in again and may reset your preferences.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

Account Data: Retained until you delete your account or request deletion
Trading History: Paper trading data retained for the duration of your account
Usage Logs: Retained for up to 12 months for analytics and security purposes
Payment Records: Retained as required by applicable tax and accounting laws (typically 7 years)
Post-Deletion: After account deletion, we may retain anonymized and aggregated data that cannot be used to identify you

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Right to Access: Request a copy of the personal data we hold about you
Right to Correction: Request that we correct inaccurate or incomplete personal data
Right to Deletion: Request that we delete your personal data (subject to legal retention requirements)
Right to Data Portability: Request an export of your data in a machine-readable format
Right to Restrict Processing: Request that we limit how we use your data
Right to Object: Object to certain types of data processing, including direct marketing
Right to Withdraw Consent: Withdraw consent for data processing at any time (where consent is the legal basis)

To exercise any of these rights, please contact us at privacy@goldtracker.ai. We will respond to your request within 30 days.

7. No Selling of Personal Data

We do NOT sell, rent, lease, or trade your personal information to third parties. We do not share your data with third parties for their direct marketing purposes. Your personal data is only shared with service providers as described in Section 3, strictly for the purpose of operating the Service.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

Encryption of data in transit (TLS/SSL) and at rest
Secure password hashing (bcrypt)
Regular security audits and monitoring
Access controls and authentication for internal systems

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

9. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

We process your data based on: (a) your consent, (b) contractual necessity to provide the Service, (c) our legitimate business interests, or (d) legal obligations
You have the right to lodge a complaint with your local data protection authority
You may request data transfers to be limited to countries with adequate data protection levels
We will provide a Data Protection Impact Assessment upon request where required

10. CCPA Compliance (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides additional rights:

Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected
Right to Delete: You may request deletion of your personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
No Sale of Data: We do NOT sell personal information as defined under the CCPA

To submit a CCPA request, contact us at privacy@goldtracker.ai.

11. Children's Privacy

GoldTracker.ai is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18, we will take steps to delete such information promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from your jurisdiction. We take appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last Updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: privacy@goldtracker.ai
Website: www.goldtracker.ai