1. Information We Collect
When you use Insspy, we collect the following information:
- Account Information: Email address and encrypted password (via Supabase Auth).
- Trade Data: Symbols, entry/exit prices, lot sizes, P&L, strategy tags, notes, screenshots, psychology ratings, and all other data you log.
- Import Data: CSV files, MT5 export data, and API keys for auto-sync (stored securely).
- Usage Data: Features used, page views, and AI analysis requests for improving the Service.
- Device & Browser Info: IP address, browser type, and operating system for analytics and security.
2. How We Use Your Information
- To provide and maintain the trading journal and analytics features
- To generate AI-powered insights based on your trade history
- To enforce usage limits and prevent abuse
- To communicate account-related notices and service updates
- To display advertisements via third-party ad networks
- To improve the Service through aggregate analytics
3. Data Sharing
We do not sell your personal data. We share data only with trusted service providers who enable our operations:
- Supabase: Authentication and database hosting (CockroachDB via Supabase). Your password is never stored in plain text.
- Adsterra: Ad delivery. Adsterra may use cookies or device identifiers subject to their own privacy policy.
- AI Providers: Anonymized trade data may be sent to AI services for generating insights. No personally identifiable information is included.
4. Data Retention
We retain your data for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days. CSV import logs and usage metrics may be retained in anonymized form for analytics.
5. Your Rights
You have the right to:
- Access your data at any time through the dashboard
- Export your trades and reports
- Edit or delete individual trade entries
- Delete your entire account and all associated data
- Opt out of AI analysis features
6. Cookies & Tracking
We use essential cookies for authentication and session management. Third-party ad networks (Adsterra) may use cookies for ad personalization. You can control cookie preferences through your browser settings.
7. Data Security
We implement industry-standard security measures including encryption in transit (TLS) and at rest. Authentication is handled by Supabase with bcrypt password hashing. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
8. Third-Party Links
The Service may contain links to third-party websites (e.g., broker sites, ad networks). We are not responsible for the privacy practices of these third parties.
9. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date. Material changes will be communicated via email or through the Service.
10. Contact
For privacy-related inquiries, contact us at support@insspy.io.