Privacy Policy

1. Information We Collect

Personal Information

When you create an account, we collect:

• Email address
• Password (hashed using bcrypt)

We also collect the following account-related data:

• Stripe customer ID (when you subscribe via Stripe)
• Subscription status (e.g., inactive, active, trialing, past_due)
• Trial start timestamp (if applicable)
• Trial checkout session ID (if applicable)
• Email verification timestamp (when you verify your email)
• Promo access flag (if you redeem a promo code)
• Account creation timestamp
• Role (user or admin) – determines access to administrative features

Additionally, we store authentication tokens (hashed) for email verification and password reset, and we store hashed promo codes when they are redeemed.

Usage and Technical Data

To operate, secure, and improve the Service, we automatically collect:

• IP address
• User agent (browser/device information)
• Request timestamps and URLs
• Usage statistics (e.g., which features are accessed, signal views)
• Cookies (set by NextAuth for session management)

We do not collect your full name, payment card details, or other sensitive financial information; payment details are handled directly by Stripe.

2. How We Use Your Information

We may use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate and secure your account
• Process payments and manage subscriptions (via Stripe)
• Communicate with you about updates, promotions, and administrative information
• Personalize your experience (e.g., remembering your session)
• Monitor and analyze trends and usage
• Detect, prevent, and address technical issues
• Comply with legal obligations

3. Sharing Your Information

We may share your information with:

• Service Providers: Third parties that help us operate the Service (e.g., hosting, payment processing (Stripe), analytics). They are required to keep your data confidential.
• Legal Requirements: If we believe disclosure is necessary to comply with a law, regulation, or legal request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• With Your Consent: Any other sharing with your explicit consent.

We do not sell your personal information to third parties.

4. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (such as for tax, accounting, or legal requirements). Authentication tokens and promo codes are deleted after use or expiration.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Receive a copy of your data in a portable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the information below.

7. International Transfers

If you are located outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

8. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. You are advised to review this Privacy Policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@spectrefinance.org.

By using the Service, you acknowledge that you have read this Privacy Policy and agree to its terms.