Privacy Policy

1. Who We Are

This Privacy Policy explains how personal data is collected and used by BadAss Trader (the "Platform"), which includes the website badass-trader.com and the iOS apps Badass Trader and Badass Trader PRO.

The data controller is Fabio Zanotto, Italy. For any privacy question or request, write to info@badass-trader.com.

2. Data We Collect

We only collect the data needed to run the Platform:

• Account data: email address, password (stored only in hashed form by our authentication provider), account type (user or trader), subscription plan and its start and expiry dates, date of last login.
• Profile data you choose to provide: first and last name, nickname, age range, phone number, postal address, city, state, ZIP code, country, trading experience and instruments of interest.
• Trader profile (PRO accounts): display name, nickname, bio, experience, instruments, statistics calculated from published trades (such as win rate and skill level) and the date the trader policy was accepted.
• Trading content: trades published by traders (underlying, strategy, legs, prices, P/L and related notes), trading account names, broker and starting buying power entered by traders.
• Activity on the Platform: traders you follow, saved positions, in-app notifications, 1-on-1 session requests (including topic and notes) and a log of account actions used for security and support.
• Payment data: payments on the website are processed by Stripe. We never receive or store full card numbers. We keep a card fingerprint (a code that identifies a card without revealing its number) only to prevent the free trial from being claimed repeatedly with the same card.
• Newsletter data: if you subscribe to the Daily Pills newsletter, your email address, the date you subscribed, confirmed and (if applicable) unsubscribed, and the date of the last edition sent to you. No account is needed to subscribe.
• Device data: if you enable notifications, a push notification token for your device. Face ID or Touch ID, when used to unlock the app, is handled entirely by iOS on your device: we never receive biometric data.
• Technical data: IP address, browser or device type and request logs, processed by our hosting and infrastructure providers to deliver the service and keep it secure.

3. How We Use Your Data

• To create and manage your account, subscription and access to the features of your plan (performance of a contract).
• To publish trades, show the feed, send in-app notifications about the traders you follow and manage 1-on-1 requests (performance of a contract).
• To process payments and prevent trial abuse and fraud (performance of a contract and legitimate interest).
• To keep the Platform secure, investigate misuse and provide support (legitimate interest).
• To send the Daily Pills newsletter by email, only if you subscribed and confirmed your address (consent, which you can withdraw at any time with the unsubscribe link included in every email).
• To send push notifications, only if you allow them on your device (consent, which you can withdraw at any time in the device settings).
• To comply with legal, tax and accounting obligations (legal obligation).

We do not sell your personal data, we do not show advertising and we do not use third-party tracking or advertising analytics.

4. What Other Users Can See

Trades published by a trader, together with the trader's display name and public profile, are visible to Platform subscribers. The personal details of users (such as email, phone number and address) are never shown to other users. When a user requests a 1-on-1 session, the trader receives the request and the information needed to arrange it.

5. Service Providers

We rely on the following providers, which process data on our behalf and only for the purposes described above:

• Supabase — database, authentication and server functions. Data is hosted in the European Union (Ireland).
• Cloudflare — website hosting and content delivery.
• Stripe — payment processing and card verification.
• Resend — delivery of the Daily Pills newsletter and its confirmation emails.
• Apple — app distribution (App Store and TestFlight) and delivery of push notifications.
• Google Fonts — web fonts loaded by the website, which receives your IP address when the fonts are downloaded.

Market quotes and option chains are retrieved by our servers from public market data sources: only ticker symbols are sent, never personal data. The daily market brief ("Daily Pills") is generated with the help of AI language models from public market data and news only; no personal data is sent to these services.

6. International Transfers

Our main database is located in the European Union. Some providers (for example Cloudflare, Stripe, Resend and Apple) may process data outside the European Economic Area. In those cases transfers are protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

7. Cookies and Local Storage

The website uses your browser's local storage to keep you signed in and to remember your preferences. These are strictly necessary for the Platform to work. We do not use advertising or profiling cookies.

8. Data Retention

We keep your data for as long as your account is active. When an account is deleted, the related profile, trades, follows, notifications and requests are deleted from our database. A card fingerprint used for the free trial is kept, no longer linked to any account, only to prevent the trial from being claimed again with the same card. Data that we are required to keep by law (for example payment and invoicing records) is retained only for the period required by applicable law. Newsletter subscriptions are kept until you unsubscribe; unconfirmed subscriptions are not used to send any newsletter. Backups are overwritten on a rolling basis.

9. Deleting Your Account

You can delete your account at any time from the BadAss Trader web platform: sign in at badass-trader.com, open Account and choose Delete account. Deletion is immediate and permanent: any active subscription is cancelled and your profile, followed traders, saved positions, notifications and 1-on-1 requests are removed. Accounts are created and deleted only on the web platform; the iOS apps offer sign-in only.

You can also ask us to delete your account by writing to info@badass-trader.com from the email address associated with your account. Trader accounts are deleted on request by our team.

10. Your Rights

Under the EU General Data Protection Regulation (GDPR) you have the right to:

• access your personal data and receive a copy of it;
• correct inaccurate or incomplete data;
• have your data deleted;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting processing carried out before the withdrawal.

To exercise these rights, contact info@badass-trader.com. You also have the right to lodge a complaint with a supervisory authority; in Italy this is the Garante per la protezione dei dati personali.

11. Minors

The Platform is intended for adults. It is not directed to anyone under 18 years of age and we do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it.

12. Security

Data is transmitted over encrypted connections (HTTPS). Access to the database is restricted by row-level security rules, so each user can only access the data they are entitled to. No system is completely secure, but we take reasonable measures to protect your data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page shows when it was last changed. If the changes are significant, we will notify you through the Platform.

← Back