Last updated: February 10, 2026
Account Information: When you create an account, we collect your email address and a hashed version of your password. We do not store plaintext passwords.
Payment Information: Subscription payments are processed by Stripe. We do not store your credit card number, CVV, or full card details on our servers. Stripe provides us with a customer ID and subscription status. See Stripe's Privacy Policy for details.
Usage Data: We may collect information about how you interact with the Service, including pages visited, features used, strategy parameters entered, and timestamps. This data is used to improve the Service.
Device and Log Data: We may automatically collect IP addresses, browser type, operating system, and referring URLs for security and analytics purposes.
We do not collect, access, or store: brokerage account information, trading account credentials, portfolio holdings, trade history, financial account numbers, Social Security numbers, or any information from your brokerage platform. The Service operates entirely independently of your brokerage.
We use collected information to: (a) provide and maintain the Service; (b) process subscription payments; (c) send transactional emails (welcome, subscription confirmations, cancellation notices); (d) improve the Service based on usage patterns; (e) protect against fraud and unauthorized access; (f) comply with legal obligations.
We do not sell, rent, or trade your personal information to third parties. We may share information with:
a) Stripe — for payment processing (subject to Stripe's privacy policy)
b) Email service providers — for transactional emails only (not marketing)
c) Law enforcement — when required by law, subpoena, or court order
d) Business transfers — in connection with a merger, acquisition, or sale of assets
We implement reasonable security measures to protect your information, including password hashing (bcrypt), encrypted connections (HTTPS/TLS), and secure session management. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
We retain your account information for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, financial records).
The Service uses essential session cookies to maintain your login state. We do not use third-party tracking cookies, advertising cookies, or analytics trackers that build user profiles. Session cookies are deleted when you close your browser or log out.
Depending on your jurisdiction, you may have the right to: (a) access the personal information we hold about you; (b) correct inaccurate information; (c) request deletion of your data; (d) object to or restrict processing; (e) data portability. To exercise these rights, contact us at privacy@wingspan.com.
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and the right to request deletion. We do not sell personal information as defined by the CCPA.
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will delete it promptly.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance.
For privacy-related questions or requests: privacy@wingspan.com