Privacy Policy

This Privacy Policy explains how Kevin Ober ("TickerTalk", "we") collects, uses, and shares personal data when you use the TickerTalk service. Kevin Ober is the data controller for personal data processed through the Service.

1. Data we collect

• Account data: email address, username, password hash, and profile settings you provide.
• Usage data: pages visited, actions taken, session duration, device and browser type, IP address, and diagnostic logs.
• Content you create: portfolio entries, journal notes, predictions, and academy progress.
• Billing data: subscription status, plan, and billing events. Full payment details (card numbers, billing address) are collected and stored by Paddle, not by us.
• Support communications: messages you send us.

2. How we use data

• To provide, maintain, and improve the Service.
• To authenticate accounts and prevent fraud or abuse.
• To process subscriptions and manage entitlements (via Paddle).
• To respond to support requests.
• To send important service and account notifications.

3. Legal basis for processing

Where GDPR or equivalent laws apply, we process personal data on the basis of: performance of a contract (providing the Service you signed up for), legitimate interests (securing the Service, improving product quality), compliance with legal obligations (tax, accounting), and consent where required.

4. Sharing and sub-processors

We share personal data only with the following categories of recipients:

• Paddle (Paddle.com Market Ltd) — verified third-party payment processor and sub-processor. Paddle acts as our Merchant of Recordfor all subscription transactions, and handles payment processing, tax calculation, invoicing, and refunds.
• Cloud infrastructure providers for hosting, database, and email delivery under written data-processing terms.
• Analytics and error-reporting tools to understand product usage and diagnose issues.
• Authorities where required by law or valid legal process.

We do not sell personal data.

5. International transfers

Some sub-processors are located outside your country of residence. Where transfers from the EEA / UK occur, we rely on Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep account and content data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 90 days, except where a longer retention period is required by law (for example, tax records associated with subscription payments, retained by Paddle for statutory periods).

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated personal data.
• Object to or restrict certain processing.
• Data portability.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at privacy@tickertalk.app. We respond within 30 days.

8. Security

We use industry-standard technical and organizational measures — including encryption in transit, hashed credentials, role-based access controls, and row-level security on our database — to protect personal data. No system is perfectly secure; you use the Service at your own risk.

9. Cookies

We use strictly-necessary cookies for authentication and session management, and limited analytics cookies to understand aggregate usage. You can control cookies through your browser settings.

10. Children

TickerTalk is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect data from them.

11. Changes

We may update this Privacy Policy. Material changes will be communicated in-app or by email.

12. Contact

Privacy questions: privacy@tickertalk.app.