ChartFIG Privacy Policy

Version 1
Effective date: October 23, 2026

This policy explains what personal information ChartFIG LLC ("ChartFIG", "we", "us") collects when you use the ChartFIG website and app (the "Service"), why, who we share it with, and the choices you have. It forms part of our Terms of Service.

We are the party responsible for your personal information. You can reach us at support@chartfig.com or 5540 Centerview Dr Ste 204, PMB 796970, Raleigh, North Carolina 27606-8012, United States.

1. The short version

• We collect what we need to run your account, bill you, deliver market data under our licences, keep the Service secure, and help you when you report a problem.
• We do not sell your personal information, and we do not show third-party advertising.
• We do not store your card number. Payments are handled by our payment processor.
• What you type or attach in our AI assistants is processed by an AI provider to produce the reply.
• We use cookies only to keep you signed in and for a few other necessary jobs. We do not use advertising or analytics cookies.

2. What we collect

2.1 Information you give us

• Account details: your name, email address, username and password. We store your password only in a scrambled (hashed) form that cannot be read back.
• Sign-up details: whether you agreed to our terms and when, and any referral code you entered.
• Billing details: your plan, subscription status, renewal dates and payment history. Your card details are entered on our payment processor's secure page and are kept by them, not us. We receive only what we need to manage your subscription, such as a customer reference, the status of payments and, sometimes, the card type and last four digits.
• Market data status: your answers to questions about whether you are a professional or non-professional user of market data, if we ask them.
• Your content and settings: your layouts, workspaces, chart settings, drawings, indicators, watchlists, favourites, price alerts, paper-trading positions and history, and any Indigo scripts you write, import or publish.
• Issue reports and feedback: what you write to our help desk or feedback form, any screenshots you attach, and the replies we send you.
• AI conversations: the messages, screenshots and context you send to our AI assistants, and their replies.
• Affiliate details: if you join the affiliate programme, the details we need to track referrals and pay commission.

2.2 Information collected when you use the Service

• Sign-in and security records: when you sign in, the IP address and browser description (user agent) of each session, when it started and was last used, and failed sign-in attempts.
• Usage needed to deliver data: which symbols and timeframes your charts are showing, so we can send you the right prices, and records of data use that exchanges require us to keep.
• Technical context with reports: when you send feedback or open the help desk, we include the chart you were looking at (for example symbol, timeframe and dates), your browser and screen size, so you don't have to describe them.
• Server logs: our servers record requests, errors and their times, which can include your IP address and account, to keep the Service running and secure.

2.3 Information from others

• Whop (only if you link it): if you choose to link a Whop account, we receive your Whop user identifier and username and whether you hold a membership that unlocks extra content. We do not receive your Whop password or payment details.
• Payment processor: confirmations of payments, failures, refunds and disputes.
• Referrals: if someone referred you, which affiliate referred you.
• Robot check: at sign-up, a third-party security service tells us whether you passed its robot check.

3. Why we use it

We use personal information to:

• Provide the Service (because we have a contract with you): create and run your account, save your settings and content, deliver charts, data and alerts, run your scripts, and handle billing and cancellations.
• Meet our data licences and the law: apply the free-plan delay, check professional and non-professional status, keep the records exchanges require, keep billing and tax records, and respond to lawful requests.
• Keep the Service secure (our legitimate interest): verify email addresses, prevent fraud, abuse, account sharing and scraping, enforce rate limits, and investigate problems.
• Support you and improve the Service (our legitimate interest): answer questions, fix the problems you report, and understand which features work and which need improving.
• Communicate with you: send verification codes, password resets, billing notices, alerts you asked for, and important notices about the Service or these policies. We will only send marketing emails if you have agreed to them, and every marketing email will let you unsubscribe.
• Run the affiliate programme: credit referrals and pay commission.

We do not use your personal information to make decisions that have legal or similarly significant effects on you based solely on automated processing.

4. Who we share it with

We do not sell or rent your personal information, and we do not share it for other companies' advertising. We share it only as follows:

• Service providers who work for us, under contracts that limit their use of it to providing their service to us:
  • our payment processor, to take payments and manage subscriptions;
  • our email delivery provider, to send account and service emails;
  • our hosting and infrastructure providers, which store and run the Service;
  • our AI provider, which processes messages, screenshots and context you send to an AI assistant, and the inputs used to write AI summaries, in order to produce a reply;
  • a security service, for the robot check at sign-up.
• Exchanges and market data providers, when their licences require us to report who receives their data, such as counts of users, professional or non-professional status, and, if they request it in an audit, details identifying a subscriber.
• Whop, only if you choose to link your account, so that your membership can be checked.
• Services you choose to open from the app, such as an integrated trading journal, receive what is needed to sign you in and the information you choose to send them. Their own privacy policies apply.
• Other users, only for things you choose to share: a published script (with your username as its author), a coach's shared charts and drawings, or similar features that say they make something visible to others.
• Affiliates who referred you may see that a referral signed up or subscribed and the commission earned, but not your contact or payment details.
• Legal and safety reasons: to comply with the law, a court order or a regulator, to enforce our terms, or to protect the rights, safety or property of our users, us or others.
• Business changes: if our business is sold, merged or reorganised, personal information may pass to the new owner, who must continue to protect it in line with this policy.

5. How long we keep it

• Account information, settings and content: for as long as your account is open. After you ask us to delete your account, we delete or anonymise it within 30 days, except as below.
• Billing and tax records: for as long as tax and accounting laws require, usually up to 7 years.
• Records exchanges require: for as long as our data licences require, usually up to 3 years.
• Sign-in sessions: a session stops working after 7 days at most. Session and security records (including IP addresses) are kept for up to 90 days.
• Issue reports, feedback and AI conversations: while they are useful for supporting you and improving the Service, and deleted with your account unless we need them for a dispute or to protect the Service.
• Published scripts: if you delete your account, your public scripts are removed, but copies other users already made may remain in their accounts.
• Backups: deleted information may stay in our backups for a limited time until they are overwritten.

We may keep information longer if the law requires it or if we need it to resolve a dispute or enforce our terms.

6. Security

We protect your information with measures such as encrypted connections, hashed passwords, sign-in sessions that expire, limits on repeated sign-in attempts, access controls that restrict who in our team can see personal information, and data kept only on servers we control or on our service providers' secure systems. No system is completely secure, so please use a strong, unique password and tell us straight away at support@chartfig.com if you think your account has been misused. If a breach affects your personal information, we will tell you and the authorities where the law requires it.

7. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy;
• correct information that is wrong or incomplete;
• delete your account and personal information;
• object to or restrict some uses, or withdraw consent where we rely on it;
• move your information to another service in a commonly used format;
• complain to a data protection authority.

To use any of these rights, email support@chartfig.com from the address on your account. We may need to confirm your identity first. We will answer within the time the law requires, and in any case within 30 days. We will not treat you differently for using your rights.

You can also:

• update most of your settings and content yourself in the app;
• unlink Whop at any time from your Account page;
• cancel your subscription from "Manage billing";
• unsubscribe from any marketing email using the link in it.

US state privacy rights. If you live in a US state with a consumer privacy law (such as California), you have the rights that law gives you, including to know, delete and correct personal information, and to opt out of its sale or sharing for targeted advertising. We do not sell personal information or share it for targeted advertising.

8. Cookies and similar technology

We use only the cookies needed to run the Service. They are not used for advertising or to track you across other websites.

Robot check. The sign-up and some sign-in pages include a third-party robot check, which may set its own cookies or read device information to tell people from bots. It is used only for security.

Storage in your browser. The app also saves some things in your browser's own storage on your device, such as your theme, which chart layout is open in each tab, panels you've opened or closed, notices you've already seen, and unsaved drafts of scripts. This stays on your device and is not used to track you. Signing out clears script drafts.

Because these cookies are needed for the Service to work, they cannot be switched off in the app. You can block or delete cookies in your browser, but you will then be unable to sign in.

We do not respond to "Do Not Track" signals because we do not track you across other sites.

9. Where your information is processed

We are based in the United States and your information is stored and processed in the United States. Some of our service providers may process it in other countries. Where the law requires, we use appropriate safeguards (such as standard contractual clauses) for transfers out of your country.

10. Children

The Service is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us at support@chartfig.com and we will delete it.

11. Changes to this policy

We may update this policy. Each version has a number and an effective date at the top. If we make a material change, we will tell you in the app and by email before it takes effect and, where the law or our Terms require it, ask you to accept the new version.

12. Contact

ChartFIG LLC
5540 Centerview Dr Ste 204
PMB 796970
Raleigh, North Carolina 27606-8012
United States
Email: support@chartfig.com