Privacy Policy

Chart Equity is a brand of Vault Media Inc., PO Box 3031, Fredericton, NB E3A 5G8, Canada("we," "us" or "our"). This policy explains what personal information we collect when you use chartequity.com and our emails, why we collect it, who we share it with and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Our Privacy Officer is responsible for how we handle personal information:

Privacy Officer, Vault Media Inc.
PO Box 3031, Fredericton, NB E3A 5G8, Canada
team@chartequity.com

• ●Account details: your name, email address and password (stored as a secure hash), or your Google profile if you sign in with Google.
• ●Billing details: your plan, subscription status and payment history. Stripe handles your card. We never see or store full card numbers.
• ●What you save and do in the app: watchlists, portfolios, audits you run, course progress and preferences.
• ●Messages you send us: contact forms, support emails and data requests.
• ●Email activity: whether our emails were delivered, opened or bounced, and whether you've unsubscribed.
• ●Technical data: IP address, browser, device, pages visited and how you found us. Sign-in sessions record your IP address and browser for security.
• ●Discord: your Discord user ID and username, only if you connect Discord.

• ●Run your account and give you the features of your plan
• ●Process payments, trials and cancellations
• ●Send account and billing notices, and, with your consent, newsletters, tips and offers (you can unsubscribe from marketing emails anytime)
• ●Understand which content and pages work, and test improvements
• ●Keep the site secure, stop bots and abuse, and limit request rates by IP address
• ●Meet our legal, tax and accounting obligations

We don't sell your personal information.

We use these service providers to run Chart Equity. Each one only gets what it needs for its job and has its own privacy policy.

• ●Better Auth: Runs sign-in on our own servers (email and password, or Google sign-in). If you use Google, Google shares your name, email and profile photo with us.
• ●Discord: Only if you connect your Discord account, so we can give you the right roles. We store your Discord user ID and username.
• ●Stripe: Processes payments and subscriptions. Your card details go to Stripe, not to us. We keep your Stripe customer ID, plan and billing history.
• ●Amazon SES (Amazon Web Services): Sends our emails. We previously used Mailgun for this. They process your email address, the email content and delivery events (delivered, opened, bounced).
• ●Neon: Hosts our database in the United States.
• ●Vercel: Hosts the website and stores files and generated reports (Vercel Blob). Vercel processes request data like your IP address to serve the site.
• ●Cloudflare Turnstile: Checks that sign-ups and some forms come from a person, not a bot. It looks at browser and device signals.
• ●Google Analytics 4: Measures how people use the site (pages viewed, rough location, device and browser) using cookies.
• ●Anthropic: Powers AI stock audits and helps prepare articles. We send stock tickers and public financial data, not your name, email or other personal information.
• ●OpenAI: Generates some article illustrations. No personal information is sent.
• ●Market data providers (via RapidAPI, Yahoo Finance and others): Supply prices, financials and news. We send stock tickers only, no personal information.

We may also share information if the law requires it, to protect our rights or users' safety, or as part of a sale or reorganization of the business.

We use Google Analytics to understand how the site is used. We don't show ads or use advertising cookies. You can opt out of Google Analytics with Google's opt-out add-on. Learn more in How Google uses information from sites or apps that use its services.

We're based in Canada, but our service providers store and process data outside Canada, mainly in the United States (for example, our Neon database and Vercel hosting). While it's there, it may be accessed by courts, law enforcement and national security authorities under local law.

• ●Account data: while your account is open, then deleted when you close it or ask us to
• ●Billing records: as long as tax and accounting law requires (usually up to 7 years)
• ●Email logs and security logs: as long as we need them to deliver email, prevent abuse and fix problems
• ●Analytics data: under Google's retention settings
• ●Rate-limit counters by IP address: kept only briefly, then discarded

We use encryption in transit (HTTPS), hashed passwords, access controls and trusted providers to protect your information. No system is perfectly secure, so we can't guarantee absolute security. If a breach creates a real risk of significant harm, we'll notify you and the Privacy Commissioner as the law requires.

• ●Access: ask for a copy of the personal information we hold about you
• ●Correction: update your details in your profile, or ask us to fix them
• ●Deletion: request deletion at /delete-my-data. Billing records we're required to keep by law are retained.
• ●Email: withdraw consent to marketing emails anytime with the unsubscribe link in any email
• ●Billing: cancel your subscription anytime in Profile > Manage Subscription

To make a request, email team@chartequity.com. We'll respond within 30 days. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

If you're in the EU, EEA or UK, the GDPR (or UK GDPR) gives you rights to access, correct, delete, restrict, object to and port your data, and to withdraw consent. We process your data to provide the service you signed up for (contract), with your consent (marketing emails, and ad and analytics cookies where consent is required), for our legitimate interests (security, fraud prevention and improving the site), and to meet legal obligations. Data is transferred to Canada, which the EU recognizes as providing adequate protection, and to the United States under our providers' safeguards. You can also complain to your local data protection authority.

Chart Equity is for adults. We don't knowingly collect information from anyone under 18. If you think a minor has given us information, contact us and we'll delete it.

We may update this policy from time to time. We'll post the new version here with a new "Last updated" date, and tell you by email about significant changes.

Questions about this policy or your data? Contact our Privacy Officer at team@chartequity.com or by mail at Vault Media Inc., PO Box 3031, Fredericton, NB E3A 5G8, Canada.