This Privacy Policy explains what information ExpectancyIQ collects, how we use it, and the choices you have. By using the Service, you agree to the collection and use of information as described here.
1. Information We Collect
- Account information: display name, email address, and authentication details (including via third-party sign-in, if you choose that method).
- Trade data: the trades, fills, and journal entries you import or enter — this is the core data the Service analyzes for you.
- Billing information: handled directly by our payment processor; we receive your subscription status and payment history, not your full card number.
- Usage data: basic technical information such as browser type, pages visited, and feature usage, used to operate and secure the Service and to understand how it is used. See Section 6 for how this works with and without your cookie consent.
- Screenshots: chart or platform screenshots you choose to attach to a trade or journal entry. Only you can see your own screenshots — please crop out any account numbers or personal information your broker platform shows before uploading.
2. How We Use Your Information
- To provide, maintain, and secure the Service.
- To process your subscription and billing through our payment processor.
- To authenticate you and keep your account secure.
- To respond to support requests you send us.
We do not sell your personal information or your trade data, ever.
3. Who We Share Data With
We use a small number of service providers ("sub-processors") to run ExpectancyIQ, each of whom only receives the data needed to perform their function and is bound by its own confidentiality and data-protection terms:
- Authentication, database, and file storage — for your account, trade data, and any screenshots you upload.
- Application hosting and content delivery — serves the Service to your browser.
- Payment processing — for subscriptions. See Section 1 for what we do and don't receive.
- Optional OAuth sign-in — if you choose to sign in with a third-party provider.
- Transactional email delivery — account and billing emails (password reset, receipts, sync alerts).
- Error monitoring — captures application errors so we can find and fix bugs; used for debugging only, never analytics or advertising.
- Product analytics — records pages visited and feature usage so we can improve the Service. Events are sent through our own domain. We do not record sessions (no screen or mouse recording).
- Performance monitoring — measures page speed. It uses no cookies.
- Ad conversion measurement — an advertising platform's tag, on public (signed-out) pages only, to measure whether our ads led to sign-ups. See Section 6.
- Bot / abuse protection — challenges suspicious form submissions (signup, contact, password reset) before they reach us.
- AI model provider — see Section 4 (AI Features) below.
We do not sell your data or share it with data brokers. The only advertising-related sharing is the ad conversion measurement described in Section 6. This list will be updated if we add new sub-processors.
4. AI Features
The marketing chat widget sends your typed question (and, if you choose to leave one, your email address) to a third-party AI model provider to generate a response. We do not send your trade data, journal entries, or account details to this provider — the widget only ever sees what you type into it. This feature is not used inside the signed-in dashboard.
5. Hosting & Data Location
Your data is hosted on infrastructure located in the United States. If you access ExpectancyIQ from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your country.
6. Cookies
We keep our cookie use small. You choose what is allowed through the cookie banner, and you can change your choice at any time with the "Cookie settings" link in the site footer.
- Strictly necessary: the session cookies of our authentication provider (they keep you signed in), your theme and sidebar preferences, and the bot-protection check. The Service needs these to work, so they are always on. Your cookie choice itself is saved in your browser's local storage under the name
eiq_consent. - Product analytics: runs for every visitor. Before you accept, it sets no cookies and uses no local storage. Visits are counted with an anonymous code that our analytics provider works out on its servers from your IP address and browser details and changes every day, so it cannot follow you from one day to the next. If you click "Accept", it stores a persistent anonymous ID in a first-party cookie and in local storage, so we can recognise return visits. If you are signed in, events are linked to your account ID. If you click "Decline", it stays in the no-cookie mode.
- Ad conversion measurement: loads only on public pages, never inside the app. Before you accept, it sets no advertising cookies and only sends cookieless signals. If you click "Accept", it may set advertising cookies used to measure sign-ups that came from our ads.
- Performance: collects page-speed metrics and uses no cookies.
7. Data Retention & Account Deletion
We retain your account and trade data for as long as your account is active. You can permanently delete your account yourself at any time from Settings → Profile — this cancels any active subscription immediately and deletes your account and personal data right away, no request or waiting period needed. Backups are purged on our standard backup rotation within 30 days after that, so a full purge (including backups) completes within 30 days of deletion, except where retention is required for legal, tax, or fraud-prevention purposes.
8. Your Rights
You can contact us at the email below to:
- Access a copy of the personal data and trade data we hold about you.
- Correct inaccurate account or profile information.
- Export your trade data and journal entries yourself at any time from Settings → Profile, as a PDF — no request or waiting period needed.
- Delete your account and personal data, per Section 7 above.
We will respond to verified requests within a reasonable timeframe.
If you are located in the UK or EEA, you also have the right to object to or restrict certain processing, and the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data properly.
9. Data Security & Breach Notification
We rely on our infrastructure providers' industry-standard security practices (encryption in transit, access controls) to protect your data — see our Security page for specifics. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a security incident that compromises your personal data, we will notify affected users without undue delay, consistent with applicable law.
10. Children's Privacy
The Service is not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 18.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date above.
12. Contact
Questions about this policy, or want to exercise a data right? Contact us.