Privacy Policy

1. Introduction & Scope

Vylestack ("we," "our," or "us") respects your privacy and is firmly committed to protecting the personal and financial data you share with us. This Privacy Policy governs the collection, use, processing, and disclosure of information when you use the Audit platform, our website, and associated applications (collectively, the "Services").

By accessing or utilizing our Services, you consent to the data practices outlined in this policy. If you do not agree with the terms herein, please discontinue use of the Services immediately. This policy has been drafted to comply with stringent international data protection frameworks, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Protection of Personal Information Act (POPIA) of South Africa.

2. Information We Collect

We collect information through multiple avenues to provide and enhance our Services:

2.1 Personal Identification Information

When you register for an account or request customer support, we may collect personally identifiable information ("PII"). This includes, but is not limited to, your email address, billing information, and account credentials.

2.2 Trading & Financial Data

Audit's core functionality requires the processing of your trading history. We collect this data via:

• Broker Statement Parsing: Data you manually upload via broker statements, including entry/exit prices, asset classes, execution times, and risk metrics. We only extract historical execution data; we do not ask for or store your brokerage passwords.

2.3 Automated Device & Usage Data

We automatically collect telemetry data regarding your interaction with our Services. This includes IP addresses, browser types, operating systems, referring URLs, device identifiers, and navigational timestamps. This data is utilized strictly to ensure platform security (e.g., cryptographic session binding) and optimize user interfaces.

3. How We Use Your Information

We employ the collected data strictly for lawful and operational purposes, including:

• Service Delivery: To generate performance analytics, maintain your trading journal, and present cohesive dashboard metrics.
• Behavioral Engine Feedback: Your trading history is processed by our systems to provide personalized psychological and strategic feedback. Your data is isolated and is never used to train public language models.
• Security & Authentication: To verify accounts, process payments securely, and monitor against unauthorized access or fraudulent activities.
• Communication: To send critical service updates, technical notices, and security alerts.

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal or financial data. We only share information under the following strictly regulated circumstances:

• Service Providers: We employ trusted third-party vendors for secure cloud infrastructure hosting, database management, and payment processing. These entities are bound by strict confidentiality agreements and are prohibited from using your data for independent purposes.
• Legal & Compliance Obligations: We may disclose information if required to do so by a valid subpoena, court order, or governmental request, or to protect the rights, property, and safety of Vylestack, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred. Users will be notified prominently before any such transfer occurs.

5. International Data Transfers

As a globally accessible platform developed in South Africa, your information may be transferred to, and maintained on, secure servers located outside of your state, province, or country of residence. By utilizing our Services, you explicitly consent to the transfer and processing of your data across international borders. We ensure all data transfers comply with recognized adequacy frameworks to guarantee the continuous protection of your privacy rights.

6. Data Security & Retention

We implement industry-standard administrative, technical, and physical safeguards to protect your data. All data transmissions are protected via Transport Layer Security (TLS/SSL).

We retain your personal information only for as long as your account remains active or as required to fulfill our legal obligations, resolve disputes, and enforce our agreements. You may request the deletion of your account and associated data at any time via your Security Settings dashboard.

7. Your Privacy Rights

Depending on your jurisdiction, you are afforded specific, legally protected rights concerning your data:

7.1 GDPR & POPIA Rights (EU & South Africa)

• Right to Access: You may request a comprehensive export of the personal data we hold about you.
• Right to Rectification: You may request corrections to inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your data from our systems.
• Right to Restrict Processing: You may request a temporary halt to the processing of your data under specific conditions.

7.2 CCPA Rights (California Residents)

• Right to Know: You may request details regarding the categories and specific pieces of personal data collected over the past 12 months.
• Right to Opt-Out: While we do not sell your data, you retain the statutory right to explicitly opt-out of any future potential sale of personal information.
• Right to Non-Discrimination: We will not deny Services, charge different prices, or provide a lower quality of Service if you exercise your CCPA rights.

8. Automated Decision Making & Analytics

The Audit platform utilizes advanced analytics to parse your trading behavior. This processing is intended solely to provide performance insights and coaching feedback. It does not produce legal effects concerning you, nor does it make automated trading decisions, financial market executions, or financial risk assessments on your behalf. All final trading decisions remain entirely with you.

9. Children's Privacy

Our Services are strictly intended for individuals who are at least 18 years of age (or the legal age of majority in your respective jurisdiction). We do not knowingly collect, process, or store personal information from minors. If we become aware that we have inadvertently collected data from a child, we will take immediate steps to purge such information from our infrastructure.

10. Changes to This Policy

We reserve the right to amend this Privacy Policy at our discretion to reflect changes in legal requirements, technological advancements, or business operations. Any material changes will be communicated to you via email or through a prominent notice on our dashboard prior to the changes taking effect. Your continued use of the Services following such notification constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or formal requests regarding this Privacy Policy or your data rights, please contact our Data Protection team: