Privacy Policy

Introduction

EchoTrader ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

By using EchoTrader, you consent to the data practices described in this policy. If you do not agree with these practices, please do not use our services.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: Name, email address, username, and password when you create an account
• Profile Information: Trading preferences, investment profile, bio, and avatar
• Portfolio Data: Holdings, transactions, and performance data you manually enter or sync
• Brokerage Credentials: Encrypted credentials for brokerage integrations (e.g., Interactive Brokers, Alpaca)
• Payment Information: Billing details processed through Stripe (we do not store full credit card numbers)
• Communications: Messages, feedback, support requests, and other content you submit

1.2 Information Collected Automatically

• Usage Data: Pages viewed, features used, time spent, clicks, and interactions
• Device Information: IP address, browser type, operating system, and device identifiers
• Location Data: General location based on IP address (not precise GPS location)
• Log Data: Server logs including access times, referring URLs, and error reports

1.3 AI and Analytics Data

• AI Interactions: Conversations with AI assistants to improve response quality
• Tool Usage: Custom tools, indicators, and strategies you create
• Preferences: Settings, customizations, and feedback you provide

2. How We Use Your Information

2.1 To Provide and Improve Our Services

• Deliver personalized analysis and insights
• Process and sync your portfolio data
• Enable AI-powered tool building and analysis
• Provide customer support and respond to inquiries
• Improve our algorithms, models, and user experience

2.2 For Communications

• Send transactional emails (confirmations, password resets, receipts)
• Deliver important service updates and security notices
• Send marketing communications (with your consent; unsubscribe anytime)

2.3 For Safety and Legal Compliance

• Detect and prevent fraud, abuse, and security threats
• Enforce our Terms of Service
• Comply with legal obligations and respond to lawful requests
• Protect the rights and safety of our users and the public

3. How We Share Your Information

We may share information in the following limited circumstances:

3.1 Service Providers

We work with trusted third-party providers who assist in operating our services:

• Cloud Infrastructure: Google Cloud Platform, Firebase
• Payment Processing: Stripe
• AI Services: Anthropic Claude, Google Gemini
• Market Data: Intrinio and other financial data providers
• Analytics: Google Analytics (anonymized data)
• Email Services: Transactional email providers

3.2 Legal Requirements

We may disclose information when required by law, court order, or government request, or to protect our rights, safety, or property.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction with appropriate notice.

4. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations (e.g., tax, accounting requirements)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).

Specific retention periods:

• Account data: Duration of account plus 30 days after deletion
• Transaction records: 7 years (legal/tax requirements)
• Server logs: 90 days
• Analytics data: 26 months (anonymized)

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: AES-256 encryption at rest; TLS 1.3 in transit
• Access Controls: Role-based access with multi-factor authentication
• Infrastructure: SOC 2 Type II compliant cloud infrastructure
• Monitoring: 24/7 security monitoring and intrusion detection
• Audits: Regular security assessments and penetration testing

6. International Data Transfers

EchoTrader is based in Singapore. If you access our services from outside Singapore, your information may be transferred to, stored, and processed in Singapore or other countries where our service providers operate.

For users in the European Economic Area (EEA), UK, or other regions with data protection laws, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Certification mechanisms where available

7. Your Privacy Rights

Depending on your jurisdiction (GDPR, CCPA, PDPA, etc.), you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw previously given consent

To exercise these rights, contact us at privacy@echotrader.ai. We will respond within 30 days (or as required by applicable law).

California Residents (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, disclosed, or sold. We do not sell personal information. To make a CCPA request, contact privacy@echotrader.ai.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Help us understand how users interact with our platform
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track conversions and ad effectiveness (opt-in only)

You can control cookies through your browser settings. Note that disabling certain cookies may affect functionality.

9. Children's Privacy

EchoTrader is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

If you believe a child has provided us with personal information, please contact us at privacy@echotrader.ai.

10. Third-Party Links and Services

Our platform may contain links to third-party websites, services, or integrations (e.g., brokerage platforms, data providers). This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email or prominent notice on our platform
• Obtain consent where required by law

Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices: