Your information.
A clearer understanding.

Who is responsible for your information?

This policy explains how Signalaxis handles personal information when you visit signalaxis.ai, create an account, use our options education and market-analysis tools, or contact support.

What information do we handle?

Account and identity

Your name, email address, account ID, verification status, account timestamps and, where supplied through an enabled sign-in provider, profile image and provider account identifier. Email-password accounts store a password hash rather than the plain-text password.

Sign-in and security

Session identifiers, session expiry, IP address, browser or device information, verification and recovery records, and rate-limit information. Connected sign-in accounts may also require provider tokens, granted scopes and token-expiry records.

Membership and billing

Membership status, access dates, accepted terms version and timestamp, administrative changes, and customer, subscription and checkout references. When an enabled checkout is used, Stripe processes payment details; our application does not store your full payment-card number or card security code.

Your workspace

Saved watchlists, selected settings, exercise attempts and scores, and Trade Journal records you enter, including account labels, balances, contracts, prices, results and notes. Enabled practice features may store simulated activity.

Support and email

Your address, messages and attachments you choose to send us; email preferences; and delivery, click, bounce, complaint and unsubscribe records when provided by our email service.

Technical requests

Requested pages and market symbols, request times, error information and security or operational logs used to deliver and protect the service. Embedded third-party content may receive browser and network information directly.

Please avoid including passwords, sign-in codes, API keys or unnecessary sensitive information in journal notes or support messages.

How do we use this information?

• Create, verify and secure accounts, recover access, and maintain sign-in sessions.
• Check membership eligibility and administer subscriptions when billing is enabled.
• Provide saved workspace features, educational exercises and personal journal summaries.
• Respond to support and privacy requests, diagnose errors, prevent abuse and maintain service reliability.
• Send essential service messages and manage product updates and offers according to your email preferences and applicable requirements.
• Maintain records needed for accounting, disputes and legal obligations.

Where a legal basis is required, we rely on providing the service you request, our legitimate interests in operating and securing it, legal obligations, or consent where applicable. You can withdraw consent for processing that relies on it by contacting us; this does not change processing already lawfully carried out.

Google, Microsoft and Apple sign-in

Provider sign-in is optional and available only when its button is enabled on our sign-in page. Email-and-password registration remains available. This policy does not mean that every provider has been activated; Apple sign-in is planned and is not currently enabled.

When you choose an enabled provider, it authenticates you and shares the identity information authorized in its consent screen, such as your provider ID, name, email, verification information and, where available, profile image. We use this information to create or authenticate your account, protect it, associate your membership and communicate with you as described below. We do not receive your Google, Microsoft or Apple password.

Our Google and Microsoft sign-in configuration requests basic identity information, not access to your email inbox, contacts, calendars or files. We do not sell Google sign-in data, use it for targeted advertising, or use it to train general-purpose AI models. Our handling of Google account data is subject to the Google API Services User Data Policy, including its applicable use restrictions.

If Apple sign-in is introduced, you may choose a private relay email address where Apple offers that option. We would use that address for account and service communications instead of your personal address. We will update this policy if the information requested or its uses change.

You may revoke a provider connection in that provider’s account settings. Revocation does not itself delete your Signalaxis account or cancel a subscription. Contact support to request removal of stored account data, and keep an available sign-in method before disconnecting a provider. Signing in through a provider does not grant a paid membership.

Market analysis and AI tools

Our analysis tools process market data, selected symbols, timeframes and calculation inputs to provide charts, indicators and educational results. Some features use programmed calculations rather than generative AI. Journal records support your personal review and statistics.

Account passwords, session credentials and social sign-in tokens are not inputs to our market-analysis tools. The current implementation does not send your private journal notes or social sign-in data to a third-party generative AI service. If we introduce a feature that sends personal content to an AI provider, we will explain that processing before you use it and update this policy.

Who may receive information?

We use service providers to operate Signalaxis and share information needed for the relevant function:

• Cloudflare: website hosting, application infrastructure, database storage, security and email services.
• Email providers: Resend for platform campaigns and Cloudflare for account email and routing. Messages sent to our support address are currently forwarded to an operator-managed Gmail inbox, where Google processes them to provide email services.
• Identity providers: Google or Microsoft when you choose an enabled sign-in method; Apple if introduced later. These providers also process your interactions under their own privacy policies.
• Stripe: checkout, customer portal, payment processing and subscription administration when those features are enabled.
• Market-data and embedded-content providers: services such as Massive and TradingView receive the requests needed to display market information. A widget loaded directly in your browser can receive your IP address, browser information and interactions with it.

Authorized personnel can access information needed to operate the service, resolve support issues and handle account requests. We may disclose information when legally required, to protect rights and security, or to professional advisers supporting those purposes. We do not sell personal information or share it with advertisers for cross-context behavioral advertising.

If operation transfers to the company after formation or to a successor, relevant information may transfer with the service, subject to applicable requirements. We will update this notice and provide additional notice or obtain consent where required.

Cookies and similar technologies

We use cookies and related browser storage where needed for sign-in, session security and enabled preferences. Authentication cookies support continuity between page requests. Blocking or clearing them may sign you out or prevent account features from working.

External charts, identity providers and other embedded services may use their own cookies or storage when you interact with them. Their policies describe their processing. You can manage browser storage through your browser settings. We will provide additional choices where required before introducing optional tracking.

Service messages and marketing preferences

Account verification, password recovery and essential service communications help us operate your account. Registered accounts may also receive feature announcements, community updates or offers, subject to applicable requirements and your preferences. Our current campaign system can include verified accounts that have not previously opted in; it excludes addresses that have explicitly unsubscribed or been suppressed.

You can stop marketing messages using the unsubscribe link in an email, through Email preferences after signing in, or by contacting support. An unsubscribe request does not stop essential account or security messages. Where enabled by our email provider, we use delivery and link-click events to understand whether messages reach recipients and which content they use.

How long is information kept, and how is it protected?

We keep account and workspace records while they are needed to provide your account and requested features. Support correspondence, security logs and billing records may be retained as needed to resolve issues, protect the service, meet legal or accounting requirements and handle disputes. We may retain limited unsubscribe or suppression records to respect your preference not to receive marketing.

Retention depends on the type of record, its purpose, account activity and applicable obligations. A deletion request is reviewed against those needs; some information may remain in restricted records or provider backups until its retention period ends. Contact us for information about a particular record or request.

We use HTTPS, access controls, password hashing and session protections. Administrative functions are restricted, and service credentials are kept server-side. These measures reduce risk, but no service can guarantee absolute security.

Access, correct or request deletion

Depending on applicable law, you may have rights to access or receive a copy of your information, correct inaccuracies, request deletion, restrict or object to processing, withdraw consent, or complain to a relevant privacy authority.

Use available account controls to update your profile, email preferences or journal records. For broader requests, email support@signalaxis.ai with the subject “Privacy request,” your account email and a description of your request. You do not need an active paid subscription to contact us.

We may need to verify that the request relates to your account before disclosing or deleting data. We will explain any information we need and respond within the period required by applicable law. Do not send your password or sign-in codes. If you have an active subscription, cancellation and data deletion are separate requests; tell us if you want help with both.

International processing

Signalaxis and its providers may process information in countries other than your own, including the United States. Privacy rules can differ between countries. Where applicable law requires safeguards for an international transfer, we use the relevant contractual or other lawful arrangements. Contact us for details about a specific provider or transfer.

A service for adults

Signalaxis is intended for people aged 18 or older. We do not knowingly seek personal information from children. If you believe a child has provided information to us, contact support so we can review and address it.

Changes to this policy

We may update this policy when our features, providers, operator details or data practices change. The date at the top identifies the latest version. For material changes, we will provide additional notice and obtain consent where required.

Related: Terms of use · Email preferences · My Account