Verstige Marketing and Technology ("Verstige," "we," "us," or "our") operates the Verstige trading platform, accessible via verstige.io and through our mobile applications on iOS and Android (the "Platform"). This Privacy Policy explains what data we collect, how we use it, when we share it, and what choices you have. By using the Platform, you agree to the practices described here.
This policy applies to all users worldwide, including users in the European Economic Area, the United Kingdom, and California. Where local law provides additional rights, those rights apply in addition to what is described below.
Account information. When you create an account we collect your name, email address, optional profile photo (avatar), optional bio, and authentication credentials. Authentication is provided by Supabase; we never see or store your password in plaintext.
Trading activity. When you place trades through the Platform (either in demo mode or through a connected brokerage account), we record the trade signal, entry price, exit price, side, quantity, instrument symbol, timestamps, and realized profit or loss. This is product core data — we use it to compute your account history, OS points, and leaderboard rank.
Connected brokerage data. If you connect a brokerage account (TradeLocker, DXTrade, or others), we receive only the access token and account ID needed to fetch your account balance, equity, open positions, and trade history on your behalf. We do not see or store your brokerage password.
Social activity. Messages you send in the Community tab, leaderboard rank, public profile fields, and engagement metrics (likes, reactions) are stored on our infrastructure.
Payment data. If you subscribe to a paid product, payment is processed by Stripe. We receive the subscription ID, plan tier, and last 4 digits of your card — never the full card number. Card data is held by Stripe under their own privacy policy.
Device and usage data. We collect IP address, user agent string, approximate geographic region (city / country), platform type (web, iOS app, Android app), and aggregate usage telemetry. We do not collect advertising identifiers (IDFA, GAID) for cross-app tracking.
Cookies and local storage. We use essential cookies and localStorage for authentication, language preference, and theme preference. We do not use third-party advertising cookies.
If you are in the European Economic Area or the United Kingdom, our legal basis for processing your data under the General Data Protection Regulation is:
We do not sell, trade, or rent your personal information. We share data only with these limited parties:
Verstige is operated from the United States. By using the Platform, you understand that your data may be transferred to, stored in, and processed in the United States and other countries where our service providers operate. We rely on Standard Contractual Clauses and equivalent safeguards to protect international transfers, where required by applicable law.
We retain different categories of data for different periods:
You have the following rights regarding your personal data. To exercise any of these, use the in-app controls or email us at the address in the Contact section below.
We respond to verified requests within 30 days. If we need more time, we will tell you why and how much more time we need.
If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:
California residents may exercise these rights by emailing us at the address below. We will not discriminate against you for exercising any of these rights.
The Platform is not directed to children under 18 (or under 13 in the United States under COPPA). We do not knowingly collect personal information from anyone under these ages. If we learn that we have collected data from a child, we will delete it as soon as possible. If you believe a child has created an account, please contact us at the address below.
We implement industry-standard safeguards to protect your data, including:
No system is perfectly secure. You are responsible for keeping your own account credentials confidential, using a strong unique password, and signing out of shared devices.
The Platform uses automated systems to compute your OS points tier, leaderboard rank, and trade journal analytics. These systems do not produce legal effects or otherwise significantly affect you — they are informational only. We do not use automated systems for credit decisions, employment, or housing.
If you believe an automated decision has incorrectly affected you, you have the right to request human review.
The Platform may contain links to third-party websites, brokerage platforms, or partner services that we do not operate. We are not responsible for the privacy practices of those services. We encourage you to read their privacy policies before sharing personal information with them.
Connected brokerage providers (TradeLocker, DXTrade, and others) have their own privacy policies that govern the data flowing through their APIs. We do not control what those providers do with the data you send them directly.
We honor Do Not Track (DNT) and Global Privacy Control (GPC) signals. If your browser sends a DNT or GPC header, we treat it as a request to opt out of any non-essential tracking or analytics. We do not track users across other apps or websites, so this opt-out has limited practical effect, but we honor it nonetheless.
We may update this Privacy Policy from time to time. When we do, we will:
Continued use of the Platform after a material change constitutes acceptance of the updated policy. If you do not agree to a material change, you may delete your account before the change takes effect.
For questions, requests, or complaints about this Privacy Policy or how your data is handled, contact:
Verstige Marketing and Technology — Privacy Team
Email: support@verstige.io
Response time: within 30 days
EU/UK representative and Data Protection Officer details can be added here once we establish those roles. Until then, please use the email above.
You can delete your account and all associated personal data at any time:
Deletion is permanent. We will delete your profile, trade history, OS points, social messages, and authentication credentials. Some data may be retained in anonymized form for aggregate analytics, and trade records may be retained for up to 7 years per financial record-keeping laws. See Section 7 for full retention details.