Privacy Policy

1. Introduction

Welcome to TrioChart (“we,” “us,” or “our”). We operate the website at triochart.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service. For questions, contact us at support@triochart.com.

2. Information We Collect

2.1 Information You Provide

• Email address — collected when you create an account via our email verification system.
• Payment information — when you subscribe to a paid plan, payment details are collected and processed directly by our third-party payment processor. We do not store your full credit card number.

2.2 Information Collected Automatically

• Device and browser information — IP address, browser type, operating system, and device identifiers.
• Usage data — pages visited, features used, timestamps, and referring URLs.
• Cookies — as described in Section 7 below.

2.3 AI Chat Data

When you use our AI chat feature, your messages and the AI-generated responses are processed by a third-party AI provider. We may retain chat data to provide the feature and improve the Service. Do not share sensitive personal, financial, or medical information through the AI chat.

2.4 Information We Do Not Collect

We do not collect passwords, Social Security numbers, government-issued identification, or biometric data.

3. How We Use Your Information

• To create, maintain, and authenticate your account.
• To process payments and manage your subscription.
• To provide and operate the Service, including chart scanning and AI chat features.
• To send transactional emails (account verification, subscription confirmations).
• To send daily digest emails if you have opted in via your account settings.
• To respond to your inquiries and provide support.
• To monitor usage trends and improve the Service.
• To detect, prevent, and address technical issues, fraud, or abuse.
• To comply with legal obligations.

4. Legal Basis for Processing (GDPR)

If you are in the EEA, UK, or Switzerland, our legal bases for processing include:

• Performance of a contract — providing the Service you requested.
• Consent — where you have given explicit consent (e.g., opting in to digest emails).
• Legitimate interests — improving the Service and preventing fraud.
• Legal obligation — compliance with applicable law.

5. Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information with:

5.1 Service Providers

We use third-party services to operate the Service, including providers for authentication, database hosting, payment processing, AI processing, stock market data, and infrastructure hosting. These providers process your data on our behalf and are contractually obligated to protect it. No personal information is shared with stock data providers — only ticker symbol queries are transmitted.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, safety, or property.

5.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you of any such change.

6. Data Retention

• Account data — retained while your account is active. Deleted within 30 days of account deletion, except where required by law.
• Payment records — retained as required by tax and financial regulations (typically up to 7 years).
• AI chat history — retained for up to 90 days, then automatically deleted.
• Server logs — retained for up to 30 days.

You may request deletion of your data at any time by contacting support@triochart.com.

7. Cookies

We use the following cookies:

• Authentication session cookie — essential for keeping you signed in.
• Locale preference cookie — stores your selected language.

We do not use analytics, advertising, or third-party tracking cookies. If we introduce analytics in the future, we will update this policy and obtain consent where required. You can control cookies through your browser settings.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms to protect your data.

9. Your Rights (GDPR)

If you are in the EEA, UK, or Switzerland, you have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

Contact support@triochart.com to exercise these rights. We will respond within 30 days.

10. Your Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used.
• Request deletion or correction of your personal information.
• Opt out of the sale or sharing of personal information — we do not sell your data.
• Non-discrimination for exercising your rights.

Contact support@triochart.com to exercise your rights. We will respond within 45 days.

11. Children's Privacy

The Service is not directed to individuals under 16. We do not knowingly collect personal information from children. If we discover that we have collected data from a child, we will delete it promptly.

12. Security

We implement reasonable safeguards including encrypted data transmission (TLS/SSL), secure authentication, and infrastructure access controls. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

13. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.

14. Email Communications

• Transactional emails — account verification, subscription confirmations, and receipts. These cannot be opted out of while your account is active.
• Daily digest emails — optional, opt in/out via account settings at any time.

We do not send unsolicited marketing emails or share your email with third parties for marketing.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a prominent notice on the Service or by email. Your continued use after changes constitutes acceptance of the updated policy.

16. Contact Us

For questions about this Privacy Policy, contact us at support@triochart.com. We will respond within 30 days.