This Privacy Policy should be reviewed by qualified legal counsel before publication. It is a product specification template and does not constitute legal advice.
Overview
Creator CoreForge ("CoreForge," "we," "us," or "our") operates the CoreForge Trader platform. This Privacy Policy describes how we collect, use, store, and protect information when you use our platform, including web applications, APIs, and related services.
Information We Collect
Account Information
- Name, email address, and authentication credentials
- Subscription tier and billing information (processed by Stripe)
- Profile preferences and display settings
Brokerage Data
- Brokerage account identifiers and connection tokens (via SnapTrade)
- Portfolio holdings, positions, and transaction history
- Account balances and performance data
Platform Usage Data
- Trading activity, strategy configurations, and watchlists
- AI chat interactions and trade explanations
- Risk profile questionnaire responses
- Feature usage analytics (collected via PostHog)
- Device type, browser, IP address, and session metadata
Market Data
- Price alerts and notification preferences
- Research queries and intelligence grid interactions
- Goal definitions and investment policy preferences
How We Use Your Information
- Execute trades and manage your portfolio according to your instructions
- Generate AI-powered trade explanations, analysis, and recommendations
- Enforce risk management rules and emergency protection systems
- Process subscription payments and manage your account
- Send notifications about trades, alerts, and account activity
- Detect market regimes and generate performance attribution reports
- Improve platform features, fix bugs, and optimize performance
- Comply with legal obligations, including audit trail retention
Data Sharing
We share your information only in the following circumstances:
- Brokerage Partners: Portfolio and order data is shared with your connected brokerage via SnapTrade to execute trades and retrieve account information.
- Payment Processor: Billing information is processed by Stripe. We do not store your full payment card details.
- Infrastructure Providers: Data is stored on Supabase (PostgreSQL database and authentication) and hosted on cloud infrastructure.
- Analytics: Anonymized usage data may be processed by PostHog for product analytics. No trading data or financial information is sent to analytics services.
- Legal Requirements: We may disclose information when required by law, regulation, legal process, or governmental request.
We do not sell your personal information. We do not share your trading data with advertisers or data brokers.
Data Security
- All data is encrypted in transit (TLS) and at rest
- Brokerage connection tokens are managed by SnapTrade, not stored directly by us
- API keys are stored as SHA-256 hashes; plaintext keys are shown once at creation
- Row-level security (RLS) ensures users can only access their own data
- Administrative access uses separate service-role credentials
- Decision receipts and audit trails provide tamper-evident logging
Data Retention
- Account data is retained while your account is active
- Trading history and decision receipts are retained for compliance purposes (minimum 7 years or as required by applicable regulations)
- Analytics data is retained in aggregate form
- You may request deletion of your account and personal data, subject to regulatory retention requirements
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access and receive a copy of your personal data
- Correct inaccurate personal data
- Request deletion of your personal data
- Object to or restrict processing of your data
- Data portability (receive your data in a structured format)
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us using the information on our Contact page.
Cookies and Tracking
We use essential cookies for authentication and session management. Analytics cookies (PostHog) are used to understand feature usage and improve the platform. You may configure your browser to reject non-essential cookies.
Children
CoreForge Trader is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notification or email. Continued use of the platform after changes constitutes acceptance of the updated policy.