Privacy Policy

Last Updated: June 7, 2026

1. Information We Collect

We collect:

• Account Information: Name, email, phone, country
• Payment Information: Processed by Moyasar; we do not store card details
• Usage Data: Pages viewed, signals interacted with, time on platform
• Device Data: Browser type, IP address, operating system
• Trading Preferences: Asset classes followed, alert configurations

2. How We Use Information

Your information is used to:

• Provide and improve the Service
• Process payments and manage subscriptions
• Send service notifications and signals
• Personalize your experience
• Comply with legal obligations
• Detect and prevent fraud

3. Data Sharing

We DO NOT sell your personal data. We share data only with:

• Payment processors (Moyasar) — for transaction processing
• Service providers (cloud hosting, email) — bound by confidentiality
• Legal authorities — when required by Saudi law

4. Saudi PDPL Compliance

We comply with Saudi Personal Data Protection Law (PDPL). Saudi user data is stored in compliance with data localization requirements. You have rights to:

• Access your data
• Correct inaccurate data
• Request deletion (subject to legal retention requirements)
• Object to processing
• Data portability

5. Cookies & Tracking

We use essential cookies for authentication and functionality. Analytics cookies help us improve the Service. You can manage cookie preferences in your browser.

6. Data Security

We implement industry-standard security:

• SSL/TLS 256-bit encryption
• Encrypted password storage (bcrypt)
• Regular security audits
• Access controls and authentication
• Biometric login support

7. Data Retention

We retain personal data for the duration of your subscription plus 3 years after account closure (for legal/tax compliance). You may request earlier deletion subject to legal requirements.

8. Children's Privacy

ChartStation is not intended for users under 18. We do not knowingly collect data from minors.

9. International Transfers

Saudi user data is primarily stored in KSA. Some service providers may process data internationally, with appropriate safeguards.

10. Marketing Communications

We may send service-related emails (always). Marketing emails require opt-in. You can unsubscribe anytime.

11. Changes to This Policy

Material changes will be communicated via email. Continued use after changes constitutes acceptance.

12. Contact

Privacy questions: privacy@chartstationai.com

Data Protection Officer: dpo@chartstationai.com