Privacy Policy

Spoolado ("we," "us," or "our") operates the Spoolado trading education platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Account Information

• Name and email address when you create an account
• Authentication credentials (passwords are hashed and never stored in plain text)
• Profile information from third-party login providers (e.g., Google) if you choose to sign in that way

Usage Data

• Lesson progress, quiz scores, and learning streaks
• Feature usage patterns to improve the platform

Trading Data

• Journal entries, trade logs, playbook setups, checklists, and other trading data are stored locally in your browser and automatically synced to our servers when you are logged in
• Server-side storage ensures your data is preserved even if you clear your browser cache or switch devices
• Screenshots attached to journal entries are stored locally only and are not synced to our servers
• You can request deletion of all your synced data at any time from your account settings

Payment Information

• Payment processing is handled entirely by Stripe
• We never store your credit card numbers, CVV, or full payment details on our servers

• To provide, maintain, and improve the platform
• To manage your account and track your learning progress
• To process payments and manage subscriptions
• To send important account-related communications
• To respond to your requests and provide support
• To detect and prevent fraud or abuse

We do not sell, trade, or rent your personal information to third parties. We may share information with:

• Service providers — Stripe (payments), Turso (database hosting), Vercel (hosting) — only as necessary to operate the platform
• Legal compliance — when required by law, regulation, or legal process
• Business transfers — in connection with a merger, acquisition, or sale of assets

We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords (bcrypt), and secure session management. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We use session cookies for authentication. We use browser local storage to cache your preferences, journal data, and learning tools data on your device for fast access. When you are logged in, this data is automatically synced to our secure servers so your trading journal and progress are never lost. You can delete all server-side data at any time from your account settings, and clear local data through your browser settings.

You have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your personal data
• Export your data at any time using the built-in export feature
• Request deletion of all synced trading data from our servers

We retain your account data and synced trading data for as long as your account is active. If you delete your account, we will delete all your personal data and synced trading data within 30 days, except where we are required to retain it by law. You can also delete all synced data independently without deleting your account. Local browser data is immediately removed when you clear your browser data.

Spoolado is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or your personal data, please contact us at support@spoolado.io.