MarketPilot legal
Privacy Policy
How MarketPilot collects, uses, discloses, and protects personal information.
Effective: July 25, 2026
1. Information we collect
Account and contact data: name, email address, password hash, account role, plan, market preferences, and support communications.
Billing data: Stripe customer and subscription identifiers, plan, subscription status, renewal and cancellation dates. Payment-card details are entered on Stripe’s hosted checkout and are not stored in MarketPilot’s database.
Trading and user content: journal entries, trades, positions, orders, portfolios, strategies, playbooks, watchlists, notes, screenshots, scanner settings, alerts, and related analytics.
Connections and credentials: broker account identifiers, OAuth tokens, API keys, integration settings, and encrypted credentials you choose to connect.
Technical and usage data: IP address, request and security logs, device/browser information, authentication activity, feature usage, cookies, and local-storage preferences.
2. Sources
We receive information from you, your browser or device, connected brokers and integrations, Stripe, support interactions, and service providers that help operate or secure the Service.
3. How we use information
We use information to provide and personalize the Service; authenticate accounts; process subscriptions; sync broker data; run user-requested analysis and AI features; send service and security messages; provide support; prevent fraud and abuse; debug and improve reliability; comply with law; and enforce our agreements.
4. When information is disclosed
We disclose information only as reasonably needed to operate the Service, at your direction, or for legal and safety reasons. Recipients may include cloud hosting and database providers, Stripe, Resend, connected brokers, market-data and chart providers, and AI providers such as OpenAI or Google when you invoke an applicable feature.
Information sent to a connected broker, AI provider, or other integration is governed by that provider’s own terms. Do not submit confidential information to an AI feature unless you are comfortable with that provider processing it.
We may also disclose information in a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice where required.
5. Selling and targeted advertising
MarketPilot does not currently sell personal information or use third-party advertising cookies for cross-site targeted advertising. If that practice changes, this notice and any legally required choice mechanism must be updated before the change begins.
6. Retention and deletion
We retain information for as long as needed to provide the Service, maintain security and business records, resolve disputes, meet tax and legal obligations, and enforce agreements. Retention depends on the data type, account status, sensitivity, and applicable requirements.
You may request account deletion through the contact below. Some billing, security, transaction, backup, or legal records may be retained where required or permitted. Deleting MarketPilot data does not delete records held independently by Stripe, a broker, or another provider.
7. Security
We use measures designed to protect information, including HTTPS in transit, access controls, password hashing, encrypted integration credentials, and managed cloud infrastructure. No system is completely secure, and you should protect your password, API keys, broker credentials, and devices.
8. Your choices and rights
You may update profile and integration settings, disconnect providers, and request access, correction, deletion, or a copy of personal information. Rights vary by location, and we may need to verify your identity. You may appeal a denied request where local law provides that right.
For browser storage details, see the Cookie Policy.
9. International processing and children
Paid subscriptions are currently offered only to customers in the United States. Service providers may still process information in other countries, subject to their contractual and legal safeguards.
The Service is not directed to children or anyone who cannot legally enter the applicable agreement. Contact us if you believe a child provided personal information.
10. Changes
We may update this policy as the Service or law changes. We will post the updated date and provide additional notice for material changes when required.