Privacy Policy
1. What we collect
- Account: name, email, password (stored hashed, never readable), phone and country if you give them, trading experience and how you heard about us, email verification time.
- Billing: Stripe customer and subscription ids, plan, billing period, and the name, address and phone collected at checkout. Stripe processes your card; we never see the full number.
- Agreements: the time, IP address and browser of your acceptance of checkout terms and the Copy Trading Agreement — kept as evidence of what you agreed to.
- Journal data: trades, notes, playbooks and settings you put into SniperJournal, including trades imported from statements or synced from your broker.
- Broker connections: MetaApi / TradeLocker credentials you choose to connect, encrypted at rest with a key we hold separately. The MT4/MT5 add-on sends closed trades only; it never sends your platform password.
- Community links: your Telegram or Discord id and username when you join through your personal invite, so access can be granted and removed automatically.
- Usage and device: logins, pages used, IP address, browser, coach usage counts — for security, support, dispute evidence and improving the product.
- Leads: name and email if you request the free checklist or join a waitlist.
- Reviews: the rating and text you submit and your display name (first name and last initial).
Please don't send us government IDs, full card numbers or anyone else's personal data.
2. Why we use it
To run your account and memberships; to bill you and send receipts; to grant and remove community access; to sync and display your trades and run the AI coach on your own journal; to send transactional email (verification, setup guide, booking confirmations, renewal reminders) and, if you opted in, occasional lessons and updates; to answer support; to detect fraud and abuse; to respond to chargebacks with evidence; and to meet legal obligations. We do not make automated decisions with legal effects about you.
Where EU/UK law applies, our bases are performance of a contract, consent (marketing email), legitimate interests (security, fraud, product improvement) and legal obligation.
3. Who processes it for us
- Stripe (payments, disputes), Resend (email), Vercel (hosting) and Prisma Postgres (database) — all US-based with industry-standard safeguards.
- MetaApi and TradeLocker (broker connections you choose to add), Social Trader Tools (copy trading billing and the copier).
- Anthropic (the AI coach reads the journal text you ask it about; it is not used to train their models under our agreement).
- Telegram and Discord (community access), Zoom (classes), Whop (only historical review and membership records during the migration).
We share data only with these processors, when the law requires it, in a business transfer, or with your permission. We do not sell personal information.
4. Cookies
We use a session cookie to keep you signed in and a few preferences in your browser. We do not run advertising trackers on the app. If we add analytics, it will be cookie-free or consent-based where required.
5. How long we keep it
- Account and journal data: while your account exists, then deleted within 90 days of closure unless we must keep it (billing records, dispute evidence) — those are kept as long as the law and our card processor require.
- Agreement and dispute evidence: for the period in which a chargeback or claim can be raised.
- Leads: until you unsubscribe or ask us to delete you.
- Security logs: up to 12 months.
6. Security
HTTPS everywhere, passwords hashed, broker credentials encrypted, access limited to the people who need it. No system is perfectly secure; tell us immediately if you think your account was accessed by someone else.
7. International transfers
We are in the United States and our processors are mostly US-based. If you are outside the US, your data is transferred to and processed in the US under standard contractual safeguards.
8. Your rights
You can access, correct, export or delete your data, and withdraw marketing consent at any time. EU/UK/Swiss residents also have the rights to restrict or object to processing and to complain to a supervisory authority; California and other US-state residents have the rights their laws provide, including not being discriminated against for exercising them. To make a request, reply to any email from us with "Privacy request" in the subject. We answer within 30 days.
9. Children
The Services are for adults 18 and over. If we learn we hold data from a minor, we delete it.
10. Changes and contact
We post updates here and change the date above; significant changes are announced in the app or by email. Contact: reply to any email from us, or write to MarksFxAcademy LLC, 7872 Guinness Way, Colorado Springs, CO 80951, USA. See also the Terms of Service.