Privacy Policy for Chartiqs

Last Updated: February 8, 2026

Welcome to Chartiqs ("we," "us," or "our"). This Privacy Policy describes how Chartiqs ("Service") collects, uses, discloses, and protects your information when you use our website at https://chartiqs.com (the "Website") and our AI-powered commodity impact factor analysis services.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

1. Information We Collect

1.1 Personal Information

We collect personal information that you voluntarily provide to us when you register for an account, subscribe to our services, or contact us. This includes:

• Email Address: Used for account creation, authentication via Supabase Auth (magic link login), service communications, and subscription management.
• Name: Optional profile information to personalize your experience.
• Account Credentials: Authentication tokens managed securely by Supabase.

1.2 Payment Information

Payment information is processed entirely by Stripe, our third-party payment processor. We do not collect, store, or have access to your complete credit card numbers or banking details. Stripe provides us with limited information such as:

• Last four digits of your payment card
• Payment card brand (Visa, Mastercard, etc.)
• Billing address (if provided)
• Stripe customer ID for subscription management
• Payment transaction status and history

1.3 Usage Data

We automatically collect information about your interaction with our Service:

• AI Interaction Data: Questions you ask our AI assistant, commodity analysis requests, timestamps, and daily usage counts (to enforce question limits: 3/day for free users, 20/day for paid subscribers).
• Service Usage: Commodities viewed, pages accessed, features used, session duration, and interaction patterns.
• Subscription Data: Plan type, subscription status, trial period information, and billing history.

1.4 Technical Information

We collect technical data to provide and improve our services:

• Device Information: Browser type and version, operating system, device type, screen resolution.
• Network Information: IP address, approximate geographic location (country/region level), internet service provider.
• Cookies and Similar Technologies: Session identifiers, authentication tokens, preference settings, and analytics data.

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: Provide access to commodity analysis, AI-powered factor matrices, real-time price charts, and AI Q&A features.
• Account Management: Create and manage your account, authenticate users, process subscriptions, and enforce usage limits.
• Payment Processing: Process subscription payments, manage billing cycles, handle refunds, and maintain transaction records.
• Communication: Send transactional emails (login links, subscription confirmations, payment receipts), service updates, and customer support responses.
• Service Improvement: Analyze usage patterns, identify bugs, optimize performance, and develop new features.
• Compliance and Security: Detect and prevent fraud, enforce our Terms of Service, comply with legal obligations, and protect user safety.
• Analytics: Understand how users interact with our Service to improve user experience and content relevance.

3. AI Data Processing (Google Gemini)

Chartiqs uses Google Gemini API to power our AI analysis and Q&A features. When you use these features:

• Your questions and commodity analysis requests are sent to Google's servers for processing via the Gemini API.
• Google processes this data according to their own privacy policies and terms of service. We recommend reviewing Google's Gemini API Terms and Google Privacy Policy.
• According to Google's policies, your data sent to Gemini API is not used to train Google's models or improve their services beyond providing the immediate API response.
• We cache AI-generated analysis results for up to 24 hours to improve performance and reduce API costs, but user questions are not stored long-term beyond usage count tracking.
• We do not share personally identifiable information with Google beyond what is necessary to process your AI requests.

4. Third-Party Services

We work with trusted third-party service providers to operate our Service:

4.1 Supabase

Purpose: Database hosting, user authentication, and data storage.

Data Shared: Email addresses, authentication tokens, user profiles, usage records, and service data.

Privacy Policy: https://supabase.com/privacy

4.2 Stripe

Purpose: Payment processing and subscription management.

Data Shared: Email, billing information, payment details, and transaction history (all processed directly by Stripe).

Privacy Policy: https://stripe.com/privacy

4.3 Google Gemini API

Purpose: AI-powered commodity analysis and question answering.

Data Shared: User questions, commodity data, and analysis requests (see Section 3 above).

Privacy Policy: https://policies.google.com/privacy

4.4 TradingView

Purpose: Embedded real-time commodity price charts via TradingView widgets.

Data Shared: TradingView widgets may set their own cookies and collect usage data according to their privacy policy. We do not control TradingView's data practices.

Privacy Policy: https://www.tradingview.com/privacy-policy/

4.5 Cloudflare

Purpose: Website hosting, content delivery network (CDN), and DDoS protection.

Data Shared: IP addresses, browser information, and network request data for security and performance optimization.

Privacy Policy: https://www.cloudflare.com/privacypolicy/

5. Data Retention

We retain your information for the following periods:

• Account Data: Retained for the duration of your active account plus 90 days after account closure (for billing disputes and legal compliance).
• Usage Records: Daily AI question counts retained for current subscription period plus 1 year for analytics and dispute resolution.
• Transaction History: Retained for 7 years to comply with financial regulations and tax requirements.
• Cached Analysis Data: Automatically deleted after 24 hours.
• Technical Logs: Retained for 90 days for security and troubleshooting purposes.

Upon account deletion request, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., preventing fraud, enforcing agreements).

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL. Database connections use encrypted channels.
• Authentication: Secure magic link authentication via Supabase with token-based session management.
• Access Controls: Strict access controls limit employee and contractor access to personal data on a need-to-know basis.
• Infrastructure Security: Our hosting providers (Supabase, Cloudflare) maintain SOC 2 Type II compliance and implement robust physical and network security measures.
• Regular Audits: We conduct regular security reviews and vulnerability assessments.

While we take reasonable measures to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

7. Cookies and Tracking

We use cookies and similar tracking technologies to provide functionality and analyze usage:

7.1 Essential Cookies

Required for Service functionality: authentication tokens, session management, security features. These cannot be disabled without affecting Service functionality.

7.2 Analytics Cookies

Help us understand how users interact with our Service to improve user experience and identify technical issues.

7.3 Third-Party Cookies

TradingView widgets and other embedded content may set their own cookies. We do not control these third-party cookies.

Most web browsers allow you to control cookies through their settings. However, disabling essential cookies will prevent you from using the Service.

8. Children's Privacy

Chartiqs is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@chartiqs.com, and we will promptly delete such information from our systems.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

9.1 Access and Portability

You have the right to request a copy of the personal information we hold about you. We will provide this in a structured, commonly used, and machine-readable format.

9.2 Correction

You can update your account information at any time through your account settings. You may also request correction of inaccurate data by contacting us.

9.3 Deletion

You can request deletion of your account and associated personal data by contacting support@chartiqs.com. We will honor your request within 30 days, subject to legal retention requirements.

9.4 Objection and Restriction

You may object to certain processing of your data or request restriction of processing in specific circumstances.

9.5 Withdraw Consent

Where we process your data based on consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at support@chartiqs.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction.

Our service providers (Supabase, Google, Stripe, Cloudflare) operate globally and may process data in various regions including the United States, Europe, and Asia-Pacific. These providers implement appropriate safeguards such as Standard Contractual Clauses (SCCs) and comply with applicable data protection frameworks.

By using our Service, you consent to the transfer of your information to countries outside your country of residence, including the United States, which may have different data protection rules.

11. Do Not Track

Some browsers have a "Do Not Track" (DNT) feature that lets you tell websites you do not want to have your online activities tracked. We do not currently respond to DNT signals or similar mechanisms.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email (if you have an account) or through a prominent notice on our Website
• For significant changes affecting your rights, we may require your renewed consent

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

13. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@chartiqs.com with "California Privacy Rights" in the subject line.

14. European Union Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectify inaccurate personal data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with your local supervisory authority

Our legal basis for processing your personal data includes: (a) your consent, (b) performance of a contract with you, (c) compliance with legal obligations, and (d) our legitimate interests in providing and improving our Service.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: