Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information (email, username)
• MT5 account ID and username (passwords are NEVER stored)
• Trading preferences and settings
• Chart analysis history
• Device information and identifiers
• Usage data and analytics

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Execute trades through your MT5 broker
• Generate AI-powered chart analysis
• Improve and personalize your experience
• Send important notifications about your trades
• Comply with legal obligations

3. Data Storage and Security

• All sensitive data is encrypted using industry-standard AES-256 encryption
• We use Supabase for secure authentication
• Data is transmitted over secure HTTPS connections
• We implement regular security audits and updates

4. Third-Party Services

We share data with the following third-party services to provide our functionality:

• OpenAI - For AI-powered chart analysis (anonymized data only)
• MetaAPI - For MT5 trading integration (passwords sent directly, never stored)
• Supabase - For authentication and data storage (no MT5 passwords)
• RevenueCat - For subscription management (mobile app)
• Vercel - For hosting and infrastructure

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. You may request deletion of your account and associated data at any time by contacting our support team.

6. Your Rights and Choices

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt-out of marketing communications
• Disable analytics collection

7. Children's Privacy

Pipflow is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. Trading and financial services are restricted to adults only.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure your data remains protected.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know about personal information collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell your personal information.

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to restriction of processing, and the right to object to processing. To exercise these rights, please contact us using the information below.

11. Data Breach Notification

In the event of a data breach that may affect your personal information, we will notify you within 72 hours via email and in-app notification, detailing the nature of the breach and steps taken to address it.

12. Cookies and Tracking

Our web application uses essential cookies for authentication and session management. The mobile app does not use cookies. We use analytics tools to collect usage data to improve our services. You can disable analytics collection in the app settings.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at: