Privacy Policy

This Privacy Policy explains how EdgeMetrics AI ("EdgeMetrics", "we", "us", "our") collects, uses, discloses, and protects your personal information when you use edgemetricsai.com and our trading performance analytics platform (the "Service").

EdgeMetrics AI is operated from Quebec, Canada. We comply with Quebec's Act respecting the protection of personal information in the private sector (Law 25) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Privacy Officer

In accordance with Law 25, we have designated a Privacy Officer responsible for compliance with this policy and applicable privacy laws.

• Name: Matthew Bean
• Title: Privacy Officer
• Email: privacy@edgemetricsai.com
• Mailing address: 406-4965 Ch. Queen-Mary, Montreal, QC H3W 1X4

You may contact our Privacy Officer at any time to exercise your rights, ask questions about this policy, file a complaint, or request a copy of our internal privacy policies and procedures.

2. What information we collect

2.1 Information you provide

• Account information — name, email address, password (hashed), billing address, and membership tier.
• Trade data — broker statements and trade history files (CSV or Excel), positions, fills, fees, and any other trade-related data you upload or import. The original files are deleted after import (see Section 10).
• Journal content — daily trading notes, tags, screenshots, and any free-form text you enter into the journal.
• AI inputs — prompts, filter selections, and any text you submit when requesting AI feedback.
• Support communications — emails, support tickets, and any information you share when contacting us.

2.2 Information collected automatically

• Usage data — pages viewed, features used, AI requests made, timestamps, and clicks.
• Device and connection data — IP address, browser type, operating system, device identifiers, and referring URLs.
• Cookies and local storage — session cookies for login, preference cookies for UI state, and analytics cookies. See Section 9.

2.3 Information from third parties

• Payment data — Stripe provides us with transaction status, last four digits of cards, and subscription state. We do not store full card numbers.
• Market data — we fetch quote and historical price data from our market data provider to enrich your trade charts. This is general market data, not personal data.

We do not purchase personal information from data brokers.

3. Why we collect it (purposes)

We collect and use your personal information for the following specific purposes:

1. Account creation and authentication — to register you, log you in, and secure your account.
2. Service delivery — to parse your broker files, calculate trading metrics, render your journal, generate AI feedback, and display charts.
3. AI feedback generation — to send your trade data and prompts to our AI model provider and return the analysis.
4. Billing and subscription management — to process payments, manage your membership tier, and apply boost credits.
5. Customer support — to answer your questions and troubleshoot.
6. Product improvement — aggregated, de-identified usage analytics to improve features. We do not train AI models on your data.
7. Legal and security obligations — fraud prevention, security monitoring, and compliance with applicable laws.
8. Communications — transactional emails (receipts, account changes) and, with your consent, marketing emails (which you can unsubscribe from at any time).

We will not use your personal information for any new purpose without obtaining your consent or providing a fresh notice, as required by Law 25.

4. Legal basis (PIPEDA + Law 25)

We process your personal information on the basis of:

• Your consent — given when you create an account, accept this policy, or opt in to specific features (e.g., marketing emails).
• Contractual necessity — processing required to deliver the Service you signed up for.
• Legal obligation — tax records, fraud prevention, responding to lawful requests.
• Legitimate interests — security monitoring, product analytics in de-identified form, where these do not override your privacy rights.

You may withdraw consent at any time (Section 7), subject to legal or contractual restrictions.

5. Automated decision-making and AI

EdgeMetrics AI uses artificial intelligence to analyze your trade data and generate written feedback. This is a form of automated processing that you should understand:

• What it does: Our AI reads the trade data, notes, and filters you submit and returns text-based observations, pattern analysis, and suggestions.
• What it does NOT do: Our AI does not make decisions that produce legal effects or similarly significant effects on you. It does not place trades, decline service, set prices, or deny features.
• It is not financial advice: AI feedback is for informational and educational purposes only. See our Terms of Use.
• Right to human review: You may contact us at support@edgemetricsai.com to ask a human to review any AI-generated output you believe is inaccurate or misleading.
• Right to know: You may request a plain-language explanation of the AI's general logic and the principal factors used in producing your feedback.
• Right to opt out: You may disable AI features in your account settings. Doing so does not affect your access to the rest of the Service.

6. Third parties we share with (data processors and recipients)

We share your information with the following categories of service providers, each bound by contractual confidentiality and data-protection obligations:

We do not sell your personal information. We do not rent, trade, or otherwise disclose your data to advertisers or data brokers.

We may disclose information when required by law, court order, or to protect our rights, users, or the public.

7. Your rights

Under Law 25 and PIPEDA, you have the right to:

1. Access — request a copy of the personal information we hold about you.
2. Correction — ask us to fix inaccurate or incomplete information.
3. Deletion — request that we delete your account and personal information ("right to be forgotten"), subject to legal retention requirements.
4. Portability — request your data in a structured, commonly used, machine-readable format.
5. Withdraw consent — at any time, with future effect.
6. Object — to certain processing, including marketing communications.
7. De-indexing — request that we cease disseminating or de-index information that causes serious harm, where applicable.
8. Information about automated decisions — as described in Section 5.
9. File a complaint — with our Privacy Officer or directly with the Commission d'accès à l'information du Québec (CAI) or the Office of the Privacy Commissioner of Canada.

8. Data security

We protect your personal information using:

• Encryption in transit — TLS 1.2+ for all connections to edgemetricsai.com.
• Encryption at rest — sensitive fields are encrypted using sodium_crypto_secretbox (or AES-256-CBC fallback).
• Access controls — role-based access; only authorized personnel may access user data, and only for the purposes listed in this policy.
• Hosting — Kinsta managed WordPress hosting with hardened infrastructure, automated backups, and DDoS protection.
• Payment data — handled exclusively by Stripe (PCI-DSS Level 1 certified); we never see or store full card numbers.
• Logging and monitoring — for security events and unauthorized access attempts.

No security measure is perfect. If we become aware of a confidentiality incident that presents a risk of serious injury, we will notify you and the CAI without delay (Law 25 requirement).

9. Cookies and tracking

• Essential — login session cookies, security tokens, and CSRF protection. Cannot be disabled.
• Preference — UI state (e.g., selected filters, expanded panels).
• Analytics — aggregated usage statistics. May include first-party analytics scripts.

We do not use third-party advertising cookies or cross-site tracking pixels.

You can control cookies through your browser settings. Disabling essential cookies will break login.

10. Data retention

• Account data — for the life of your account.
• Trade and journal data — for the life of your account, unless you delete it earlier.
• Uploaded broker files — deleted immediately after a successful import. Files from imports that fail are kept for up to 7 days so we can help you troubleshoot, then deleted automatically.
• AI usage records — we keep counts, token totals, and cost figures for AI requests (not the content of your prompts) for 24 months, then delete them automatically.
• Billing records — minimum 6 years to comply with Canadian tax law.
• Support communications — 24 months after resolution.
• Backups — rolling backups for up to 30 days.

When you delete your account, we erase or anonymize your data within 60 days, except where retention is required by law (e.g., financial records).

11. Cross-border data transfers

Some of our service providers (notably our AI model providers, our market data provider, and Stripe) are located outside Quebec, primarily in the United States. By using the Service, you understand that your data may be transferred to and processed in jurisdictions whose privacy laws differ from those in Quebec.

We assess each transfer for privacy risk before sharing data and require contractual protections from our providers, including standard contractual clauses where appropriate. You may contact our Privacy Officer for a copy of our cross-border transfer assessment.

12. Children's privacy

The Service is intended for users 18 years of age or older. We do not knowingly collect personal information from children under 18. If we learn we have collected data from a minor, we will delete it. Parents or guardians who believe their child has provided us with personal information should contact privacy@edgemetricsai.com.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will notify you by email and post a notice in the Service at least 30 days before the changes take effect. The "Last updated" date at the top will always reflect the most recent revision.

14. Contact us

For any privacy-related questions, requests, or complaints:

Privacy Officer
EdgeMetrics AI
Email: privacy@edgemetricsai.com
Website: https://edgemetricsai.com

If you are not satisfied with our response, you may file a complaint with:

• Commission d'accès à l'information du Québec (CAI) — cai.gouv.qc.ca
• Office of the Privacy Commissioner of Canada — priv.gc.ca