Privacy Policy

1. Information We Collect

1.1 Account & Authentication Information

• Email address (for account creation and login)
• Authentication data used to sign you in (for example, password-based login and/or Google OAuth)
• Basic account metadata such as account ID and timestamps (e.g., created-at)

Note: Passwords (if you use password login) are stored in hashed form by our authentication provider and are not stored in plain text.

1.2 Chat & Messaging Data

• Messages you send in channels and direct conversations
• Channel membership, invitations, and related metadata (e.g., who is in which channel)

1.3 Files You Upload

• Files and attachments you upload to the Service (and related metadata such as filename, size, upload time, and the channel or message they are associated with)

Do not upload highly sensitive personal information (such as government ID numbers, passport/NRIC images, bank account details, payment card details, or passwords). The Service does not require such information.

1.4 Device & Notification Information

• Push notification tokens (to deliver notifications)
• Device type and operating system information (e.g., iOS/Android, browser type)

1.5 Usage & Preference Information

• Chart preferences and display settings
• Selected symbols and timeframes
• Other in-app configuration settings you choose

1.6 Server Logs & Technical Data

Our hosting and infrastructure providers (such as Render and Supabase) automatically collect standard server logs, which may include:

• IP address
• Request timestamps
• Pages or endpoints accessed
• Device/browser information (e.g., user agent)
• Error logs necessary to operate and secure the Service

These logs are typically retained for limited periods by the providers and/or for operational and security purposes.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service (including chat, file uploads, and charts)
• Authenticate users and secure accounts
• Deliver push notifications for messages and alerts
• Save your chart settings and preferences
• Maintain performance, reliability, and security (e.g., preventing abuse, diagnosing issues)
• Communicate with you about service-related notices (e.g., authentication or account communications)

3. Legal Bases for Processing (EEA/UK Users)

If you are located in the EEA or UK, our legal bases for processing personal data include:

• Contract: to provide the Service you request (e.g., account access, chat, file uploads)
• Legitimate interests: to secure, maintain, and improve the Service (e.g., preventing fraud/abuse, system reliability)
• Consent: where required (for example, push notifications on your device, which you can disable at any time)

4. How We Share Information

We do not sell your personal data or share it with third parties for their marketing or advertising purposes.

We may share information in these situations:

4.1 Service Providers (Processors)

We use service providers to host and operate parts of the Service, including:

• Supabase (authentication, database, storage hosting)
• Render (application hosting)
• Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM) (push notification delivery)

These providers process data on our behalf to provide the Service.

4.2 Legal Requirements

We may disclose information if we believe it is reasonably necessary to:

• Comply with applicable laws, regulations, or legal requests
• Protect the safety, rights, or property of users, Solux, or the public
• Investigate or prevent fraud, security, or technical issues

4.3 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction (subject to applicable law).

5. Market Data and Trading Information

The Service may display real-time and historical market data from various providers.

• We do not store your broker API keys.
• We do not store your orders, trades, or positions at this time.
• The Service is for informational and educational purposes only and does not constitute financial advice.

6. Data Storage, Location & International Transfers

We use Supabase hosted on AWS and infrastructure providers such as Render. Your data is processed and stored in the region configured for our project, currently Northeast Asia (Tokyo).

Depending on where you live and where our providers operate, your information may be processed in countries other than your own. Where required, we use appropriate safeguards for international transfers.

7. Data Security

We take reasonable administrative, technical, and organizational measures designed to protect your information, including:

• Access controls and permissioning to limit data access
• Database security controls (including row-level security policies where applicable)
• Encryption in transit (e.g., HTTPS/TLS)

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain information for as long as necessary to provide the Service and for legitimate operational and security purposes.

• Account data: retained while your account is active
• Chat messages: retained as part of channel and conversation history unless deleted or removed as part of account deletion (see below)
• Uploaded files: retained while associated content remains in the Service or until deleted
• Push notification tokens: may be updated or invalidated automatically when you sign out, switch accounts, or disable notifications
• Server logs: retained for limited periods by our providers and/or as needed for security and reliability

Account Deletion

If you request account deletion, we will delete or de-identify personal data associated with your account, subject to:

• Data required to comply with legal obligations
• Limited retention in backups for a reasonable period
• Content you shared in channels where removal may affect other users (in which case we may de-identify it, for example by removing direct identifiers)

Some content you shared in channels may remain visible to others after account deletion, but we will remove direct identifiers where feasible.

9. Your Choices and Rights

Depending on your location, you may have rights to:

• Access or receive a copy of your personal data
• Correct or update your information
• Request deletion of your account and associated personal data
• Object to or request restriction of certain processing (where applicable)
• Withdraw consent (for example, push notifications via your device settings)
• Lodge a complaint with a data protection authority (where applicable)

To request account deletion or exercise your rights, contact us at the email in the "Contact Us" section.

10. Cookies and Similar Technologies (Web)

The web version of the Service may use cookies or local storage that are necessary for core functionality such as authentication and maintaining your session. We do not use third-party advertising cookies or tracking for marketing purposes.

11. Children's Privacy

The Service is not intended for children under the age of 13, and we do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy and revise the "Last updated" date above.

13. Contact Us

If you have questions or requests regarding this Privacy Policy, contact us at: privacy@soluxtechnologies.com