← Back to home
Privacy Policy
Last updated: January 1, 2026 · Effective: January 1, 2026
UrbaTrade ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and the rights you have over your personal information.
Privacy at a Glance
We never sell your data
Your personal data is never sold, rented, or traded to any third party — ever.
No ad tracking
We do not use third-party tracking cookies or advertising pixels of any kind.
Encrypted everywhere
All data is encrypted via HTTPS/TLS in transit. Passwords use bcrypt with 12+ rounds.
Right to deletion
Request full account and data deletion at any time. We complete requests within 30 days.
Data We Collect & Retain
| Type | Examples |
|---|---|
| Account data | Name, email, hashed password |
| Usage logs | Pages visited, features used, scan queries |
| Technical data | IP address, browser, device ID, timestamps |
| API keys | Polygon.io key (AES-256 encrypted) |
| Trade history | Simulated trades, positions, P&L |
| Billing data | Subscription tier, invoice history |
1. Information We Collect
- •Account information: When you register, we collect your name, email address, and password (stored as a secure bcrypt hash — we never see your plaintext password).
- •Usage data: We log pages visited, features used, AI scan queries, and trade activity within the platform to understand how users engage with UrbaTrade.
- •Technical data: IP address, browser type, device identifiers, and access timestamps for security monitoring and abuse prevention.
- •API keys: If you provide third-party API keys (e.g., Polygon.io), they are stored AES-256 encrypted and are never logged, shared, or accessible to staff.
- •Payment data: Billing information is processed directly by Stripe. We never store card numbers or payment credentials on our servers.
2. How We Use Your Information
- •To provide and operate the UrbaTrade platform, including AI scoring, signals, screener, scanner, and portfolio features.
- •To personalize your dashboard, AI signals, and trading analytics based on your activity and preferences.
- •To process billing and subscription management through Stripe — we only receive confirmation of payment, not card details.
- •To send transactional emails (password reset, billing receipts, security alerts) — we never send marketing emails without your explicit opt-in.
- •To detect and prevent fraud, unauthorized access, account takeover, and other security threats.
- •To improve our AI models and platform performance using aggregated, anonymized, non-identifiable data only.
3. Data Sharing
- •We do not sell, rent, or trade your personal data to any third parties — this is a core principle, not just a legal clause.
- •Stripe: Payment data is processed directly by Stripe and governed by their privacy policy. We receive only subscription status and invoice data.
- •Infrastructure providers: We use cloud services (Neon PostgreSQL, Vercel) who process data on our behalf under strict data processing agreements (DPAs).
- •Legal compliance: We may disclose data only if required by valid law enforcement requests or court orders — and we will notify you when legally permitted.
- •Business transfers: In the event of a merger or acquisition, your data would transfer subject to equivalent privacy protections, and you would be notified in advance.
4. Data Retention
- •Account data is retained for the duration of your account and up to 90 days after deletion, to allow recovery if deletion was accidental.
- •Trade history and audit logs are retained for 3 years for regulatory compliance, then permanently deleted.
- •Usage and technical logs are retained for 12 months and 6 months respectively, then automatically purged.
- •You may request deletion of your personal data at any time by contacting privacy@urbatrade.com — we complete verified requests within 30 days.
5. Security
- •All data is transmitted over HTTPS/TLS 1.3 encryption. We enforce HSTS and reject plaintext connections.
- •Passwords are hashed using bcrypt with a minimum cost factor of 12. Plaintext passwords are never stored or logged anywhere.
- •Database access is restricted to authorized services only, behind a private VPC with no direct public exposure.
- •API keys are encrypted at rest using AES-256 before storage and decrypted only in memory when needed.
- •We conduct regular security reviews, dependency vulnerability scans, and penetration testing.
- •In the event of a data breach, we will notify affected users within 72 hours as required by applicable law.
6. Your Rights
- •Access: Request a full copy of all personal data we hold about you at any time via privacy@urbatrade.com.
- •Correction: Update your account information directly in Settings → Account, or request corrections via email.
- •Deletion: Request permanent deletion of your account and all associated data by emailing privacy@urbatrade.com.
- •Portability: Export your trade history, portfolio data, and scan history from your account dashboard in CSV or JSON format.
- •Opt-out: Unsubscribe from non-essential communications at any time via the unsubscribe link in any email or in Settings.
- •Restriction: Request that we restrict processing of your data in certain circumstances while a dispute is being resolved.
7. Cookies & Local Storage
- •Session cookies: We use a single secure, httpOnly session cookie for authentication. It expires when you sign out or after 30 days of inactivity.
- •Local storage: We store UI preferences (sidebar state, trading mode) in your browser's localStorage — this data never leaves your device.
- •No tracking cookies: We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or advertising cookies.
- •You can clear all local data by clearing your browser's site data for urbatrade.com at any time.
8. Changes to This Policy
- •We may update this Privacy Policy as our platform evolves. The "Last updated" date at the top of this page will always reflect the current version.
- •For material changes that affect how we use your data, we will notify you via email at least 14 days before the change takes effect.
- •Continued use of the platform after the effective date of changes constitutes acceptance of the updated policy.
Questions about this policy? Contact us or email privacy@urbatrade.com
We respond to all privacy inquiries within 5 business days.