Privacy Policy

1. Introduction

TradeStack ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome browser extension and related web services (collectively, the "Service").

By using TradeStack, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address (for authentication and account recovery)
• Password (encrypted and securely stored via Supabase)
• OAuth provider information (if you sign in with Google)

2.2 Trading Data

To provide our paper trading simulation service, we collect and store:

• Virtual SOL balance
• Simulated trading positions (token addresses, entry prices, amounts)
• Transaction history (buy/sell trades, timestamps, profit/loss)
• Market cap data scraped from Axiom.trade

Important: All trading is simulated with virtual currency. We do NOT collect, store, or have access to any real cryptocurrency wallets, private keys, or actual financial transactions.

2.3 Extension Data Collection

The Chrome extension collects and processes the following data locally in your browser:

• Market cap data: The extension reads publicly displayed market cap values from Axiom.trade token pages to calculate simulated trade performance
• Authentication tokens: When you log in on tradestack.io, the extension syncs your session token from the website to extension storage so you stay logged in across both environments
• UI preferences: Overlay position and display settings are stored locally using Chrome's storage API

All extension data processing happens locally in your browser. The extension only communicates with tradestack.io servers for trading operations and authentication.

2.4 Usage Information

We automatically collect certain information when you use our Service:

• Session timestamps (login/logout times)
• Trading activity on the platform (for leaderboards and social feed)

2.5 Information We Do NOT Collect

• Real cryptocurrency wallet addresses or private keys
• Real financial or payment information
• Personal identification documents
• Browsing history outside of Axiom.trade
• Personal messages or communications

3. How We Use Your Information

We use the collected information for the following purposes:

• Account Management: Create and manage your account, authenticate users
• Service Delivery: Provide paper trading simulation features, calculate P&L, track positions
• Service Improvement: Analyze usage patterns to improve features and user experience
• Technical Support: Respond to support requests and troubleshoot issues
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with applicable laws and regulations

We do NOT use your information for marketing, advertising, or selling to third parties.

4. Data Storage and Security

4.1 Third-Party Services

We use Supabase (a trusted third-party service) to store and manage your data:

• Supabase: Database hosting, authentication, and data storage (PostgreSQL)
• Location: Data is stored on secure servers in accordance with Supabase's infrastructure
• Security: Industry-standard encryption in transit (HTTPS/TLS) and at rest

4.2 Local Storage

The Chrome extension stores authentication tokens locally in your browser using Chrome's storage API. This data remains on your device and is used solely for maintaining your logged-in session.

4.3 Security Measures

• Passwords are hashed and encrypted (never stored in plain text)
• Row-Level Security (RLS) policies ensure users can only access their own data
• All API communications use HTTPS encryption
• Regular security updates and monitoring

5. Data Sharing and Disclosure

We do NOT sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

• Service Providers: With Supabase for database and authentication services (they are bound by privacy obligations)
• Legal Requirements: If required by law, court order, or government request
• Business Transfer: In connection with a merger, acquisition, or sale of assets (users will be notified)
• With Your Consent: When you explicitly authorize us to share information

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Export: Download your trading history and data
• Opt-Out: Stop using the Service at any time by uninstalling the extension

To exercise these rights, please contact us at support@tradestack.io

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete your personal information within 30 days, except where we are required to retain it for legal compliance or legitimate business purposes (e.g., resolving disputes, enforcing agreements).

8. Children's Privacy

TradeStack is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will delete such information.

9. International Users

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to our facilities and service providers as described in this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting a notice in the extension or on our website
• Sending an email notification for material changes (if you provided an email)

Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

11. Browser Extension Permissions

Our Chrome extension requires the following permissions:

• storage: Store authentication session, overlay position, and trading data locally in your browser
• scripting: Re-inject content scripts into already-open Axiom.trade tabs after extension install or update, so you do not need to manually refresh the page
• host permissions (axiom.trade): Read publicly displayed market cap data from token pages and inject the paper trading overlay
• host permissions (tradestack.io): Sync authentication session between the TradeStack website and the extension

These permissions are used exclusively for providing the trading simulation functionality. The extension does not read or modify any page content outside of Axiom.trade, and does not track your browsing activity.

12. Affiliate Links

The extension popup contains links to third-party trading platforms (Axiom.trade and Padre.gg). Some of these links are affiliate/referral links. When you click these links, you are navigated to the respective platform with a referral parameter. This does not affect your experience on those platforms, and no additional data is collected through these links. You are never redirected without your explicit action (clicking a link).

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.

14. GDPR Compliance (For EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

Our legal basis for processing your data is your consent (when you create an account) and our legitimate interest in providing and improving our Service.