Privacy Policy

2.1 Information We Collect

We collect the following categories of personal information:

Information you provide directly

• Account registration information: email address, first name, last name, and password
• Waitlist information: email address, first name, last name
• Profile information: display name, notification preferences, Telegram chat ID
• Position tracking data: trade entries, exits, notes, and related information you voluntarily input
• Communications: emails, support requests, and feedback you send to us

Information collected automatically

• Usage data: pages visited, features used, time spent on pages, click patterns
• Device information: browser type, operating system, device type, screen resolution
• Log data: IP address, access times, referring URLs, error logs
• Cookies and similar technologies: session cookies for authentication, analytics cookies (see Cookie Policy)

Information from third parties

• Payment information: Polar (our payment processor) provides us with transaction confirmation, subscription status, and payout information. We do not receive or store your full credit card number.
• Authentication providers: if you sign in via a third-party service, we receive your name and email from that provider

2.2 How We Use Your Information

We use personal information for the following purposes:

• To operate and maintain the Platform, including account management, authentication, and delivering Skill outputs to subscribers
• To process payments and manage subscriptions through Polar
• To communicate with you about your account, subscription changes, and Platform updates
• To send you marketing communications (with your consent) including waitlist updates and launch announcements — you may opt out at any time
• To analyze usage patterns and improve the Platform's features, performance, and user experience
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations, including responding to lawful requests from authorities
• To enforce our Terms of Service and other policies

2.3 How We Share Your Information

We do not sell your personal information. We share personal information only in the following circumstances:

• Service providers: We share information with third-party service providers that perform services on our behalf, including Supabase (database hosting), Polar (payment processing), Resend (email delivery), and Vercel (web hosting). These providers are contractually bound to use your information only for the purposes we specify.
• Skill creators: If you subscribe to a paid Skill, the creator may receive your display name and subscription status. Creators do not receive your email address, payment information, or other personal data.
• Legal requirements: We may disclose your information if required to do so by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of the transaction. We will notify you of any such change in ownership.
• Aggregated or de-identified data: We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you.

2.4 Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Platform's services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account data: retained for the life of the account plus 30 days after deletion request
• Waitlist data: retained until account creation or until you request removal
• Transaction records: retained for 7 years for tax and legal compliance
• Usage analytics: retained in aggregated form indefinitely; individual-level data retained for 26 months
• Skill output and alert history: retained indefinitely as part of the platform's immutable track record system

2.5 Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of data at rest using AES-256 via our database provider (Supabase)
• Row-Level Security (RLS) policies ensuring users can only access their own data
• Regular access reviews and principle of least privilege for internal access
• No storage of payment card data — all payment processing is handled by Polar via Stripe

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

2.6 Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to access: You may request a copy of the personal information we hold about you.
• Right to correction: You may request that we correct inaccurate or incomplete personal information.
• Right to deletion: You may request that we delete your personal information, subject to legal retention requirements.
• Right to portability: You may request your data in a structured, machine-readable format.
• Right to opt out: You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or updating your notification preferences.
• Right to restrict processing: You may request that we limit our processing of your personal information in certain circumstances.

To exercise any of these rights, contact us at contact@marvane.io. We will respond to your request within 30 days.

2.7 California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) provides you with additional rights:

• Right to know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your information.
• Right to delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.
• Do Not Sell or Share: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.

To submit a verifiable consumer request, contact us at contact@marvane.io. You may also designate an authorized agent to make a request on your behalf.

2.8 International Users

The Platform is hosted in the United States. If you access the Platform from outside the United States, you understand that your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Platform, you consent to this transfer. If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal information on the basis of legitimate interest, contractual necessity, or your explicit consent, as applicable.

2.9 Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

2.10 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Platform at least 30 days before the changes take effect. Your continued use of the Platform after the effective date constitutes your acceptance of the revised Policy.