1. Introduction
Signum is operated by Kaizen Projects BV, a company registered in Belgium ("Signum," "we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered trading education platform (the "Service"). Please read this policy carefully to understand our practices regarding your personal data.
For privacy inquiries, data access requests, or any question about this policy, contact us at legal@signum.app.
2. Data We Collect
2.1 Account Information
When you create an account, we collect:
- Name and email address
- Authentication data (via Google, Apple, or email magic link)
- Profile information (experience level, preferences)
- Subscription and billing status
2.2 Trading Data
As part of the educational features, we collect and store:
- Trade journal entries (instrument, entry/exit, notes, tags)
- Chart annotations and saved analyses
- Assessment responses and progression data
- Paper trading simulation results
2.3 AI Interaction Data
When you use the AI trading mentor, we collect:
- Conversation messages and history
- Session summaries generated by the AI
- Queries and topics discussed
- Feedback and ratings you provide on AI responses
2.4 Usage and Analytics Data
We automatically collect:
- Device information (browser type, operating system, screen resolution)
- IP address and approximate geographic location
- Pages visited, features used, and session duration
- Referral source and navigation patterns
- Error and performance data
3. How We Use Your Data
We use the data we collect for the following purposes:
- Personalized Mentoring: To tailor AI mentor responses to your experience level, learning history, and trading patterns.
- Service Delivery: To provide and maintain the platform, process transactions, and manage your account.
- Platform Improvement: To analyze usage patterns, identify bugs, and improve the educational content and user experience.
- Communication: To send service-related notifications, updates, and promotional materials (with your consent).
- Security and Compliance: To detect and prevent fraud, abuse, and unauthorized access.
We do NOT sell your personal data to third parties. We never share your trading data, AI conversation history, or personal information with advertisers or data brokers.
4. Third-Party Services
We use the following third-party services to operate the platform. Each processes data only as necessary to provide their specific function:
- Stripe — Payment processing. Stripe processes your payment information directly and is PCI DSS compliant. We do not store your card details. See Stripe's Privacy Policy.
- Anthropic — AI processing. Your conversation messages are sent to Anthropic's Claude API to generate mentoring responses. Anthropic does not use your data to train their models. See Anthropic's Privacy Policy.
- PostHog — Product analytics. We collect anonymized usage data to understand how users interact with the platform. See PostHog's Privacy Policy.
- Sentry — Error monitoring. We send anonymized error reports to Sentry to identify and resolve bugs. See Sentry's Privacy Policy.
- Neon — Database hosting (PostgreSQL, EU region). User data is stored securely with strict per-user access controls enforced.
- Vercel — Application hosting. Serves the web application with edge caching.
5. Data Retention
- Active Accounts: Your data is retained for as long as your account is active and as needed to provide the Service.
- Deleted Accounts: When you delete your account, we initiate a data purge process. All personal data, trade journal entries, AI conversation history, and profile information are permanently deleted within 30 days of account deletion.
- Anonymized Analytics: Aggregated, non-identifiable usage statistics may be retained indefinitely for platform improvement purposes.
- Legal Obligations: Certain data may be retained beyond 30 days where required by law, such as billing records for tax compliance.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right to Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may request correction of inaccurate or incomplete personal data.
- Right to Deletion: You may request deletion of your personal data, subject to certain legal exceptions.
- Right to Export: You may request a machine-readable export of your data, including your trade journal entries and AI conversation history.
- Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances.
- Right to Object: You may object to processing of your data for direct marketing purposes.
To exercise any of these rights, please contact us at legal@signum.trading. We will respond to your request within 30 days.
7. GDPR Compliance (European Economic Area)
If you are located in the European Economic Area (EEA), the following additional provisions apply:
- Legal Basis: We process your data based on: (a) your consent; (b) the necessity to perform our contract with you; (c) our legitimate interests in operating and improving the Service; or (d) compliance with legal obligations.
- Data Transfers: Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place, including Standard Contractual Clauses, to protect your data.
- Data Protection Officer: For GDPR-related inquiries, contact us at legal@signum.trading.
- Supervisory Authority: You have the right to lodge a complaint with your local data protection supervisory authority.
8. CCPA Compliance (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:
- Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
- Sale of Data: Signum does not sell personal information. We have not sold personal information in the preceding twelve months.
To submit a CCPA request, contact us at legal@signum.trading. We will verify your identity before processing your request.
9. Cookies
We use cookies and similar technologies to operate the Service and collect analytics data. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
10. Children's Privacy
The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at legal@signum.trading, and we will promptly delete that information. Users must be at least 18 years old to create an account and use the trading education features.
11. Data Security
We implement industry-standard security measures to protect your personal data, including encryption in transit (TLS) and at rest, row-level security on database queries, secure authentication via OAuth providers, and regular security audits. However, no method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes that affect how we process your data, we will provide notice via email or through the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at legal@signum.trading.