Who we are.
TraderVerity is an independently operated data platform that tracks and verifies the performance of crypto signal channels and copy-traders. We are the data controller for the personal information described in this policy. Questions or requests can be sent to privacy@traderverity.com.
What data we collect and why.
Account information
When you create an account we collect your email address and a hashed password (managed through Supabase Auth — we never store plaintext passwords). If you sign up via a third-party provider, we receive the email address associated with that account. We use this to identify you, communicate with you about your account, and authenticate your sessions.
Subscription and payment data
Payments are processed by Stripe. We do not store your card number, CVV, or full payment details — Stripe handles and vaults those. We store your Stripe customer ID and subscription status (active, cancelled, trial) so we can determine what features your account can access.
Usage data
We log which features you use (e.g., viewing a trader profile, running a budget match) and when, linked to your account. This serves two purposes: (a) enforcing refund eligibility — we need to know whether paid features were accessed; (b) improving the product by understanding how it's used. We do not sell usage data or share it with advertisers.
Technical / security data
We log IP addresses and request timestamps for security and abuse prevention. These logs are retained for a limited period and are not used to profile users for advertising.
Budget preferences
If you enter a budget amount for the Budget Match feature, we store that figure to personalise your rankings view. This is a number you provide voluntarily; it is not shared externally and is not treated as financial information requiring enhanced protection.
Third-party services we use.
We use a small number of third-party services to operate the platform. Each receives only the data it needs to do its job.
Authentication and database. Stores your email and hashed credentials. Supabase is SOC 2 Type II compliant.
Payment processing. Handles all card data. We receive only transaction status and customer identifiers.
Hosting for the public website. Vercel may log request metadata (IP, user-agent) for infrastructure purposes.
We do not use advertising networks, tracking pixels, or data brokers. We do not sell your data to any third party.
Cookies and tracking.
We use session cookies issued by Supabase to keep you logged in across page loads. These are strictly necessary and cannot be opted out of while using an authenticated session. We do not use advertising cookies or cross-site tracking technologies.
The public website (traderverity.com) does not set persistent tracking cookies. If we add analytics in future, we will update this policy and give you an opt-out mechanism before doing so.
Data retention.
We retain your account data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or financial compliance (for example, payment records required for tax purposes, which we retain for 7 years).
Security logs (IP addresses) are retained for 90 days and then purged.
Your rights.
Depending on where you're located, you may have some or all of the following rights regarding your personal data. We honour all of them regardless of your jurisdiction.
-
Access: Request a copy of the personal data we hold about you.
-
Correction: Ask us to correct inaccurate data.
-
Deletion: Ask us to delete your account and associated personal data.
-
Portability: Request your data in a machine-readable format.
-
Objection: Object to how we process your data, where we rely on legitimate interests as a basis.
-
Restriction: Ask us to pause processing while a dispute is resolved.
To exercise any of these rights, email privacy@traderverity.com. We'll respond within 30 days.
Changes to this policy.
If we make material changes — changes that affect what data we collect, who we share it with, or how long we keep it — we will notify registered users by email before the change takes effect. The date at the top of this page always reflects the last update. Continued use of the service after the effective date constitutes acceptance of the revised policy.