This Privacy Policy explains how Uptick Trader LLC ("Uptick Trader", "we", "us", or "our") collects, uses, shares, and protects information about you when you use our website and services (the "Services"). By using the Services, you agree to the practices described here.
1. Information We Collect
1.1 Information You Provide
When you register, purchase a Challenge, or use the Services, you provide us with:
- Account information: name, email address, password (encrypted).
- Identity verification (KYC) information: government-issued ID, proof of address, date of birth, country of residence — collected before your first payout.
- Payment information: credit card details (handled by our payment processor — we do not store full card numbers on our servers), bank account information for payouts.
- Tax information: taxpayer identification number, completed tax forms (W-9, W-8BEN) as required by law.
- Communications: the content of messages you send to our support team.
1.2 Information Collected Automatically
When you use the Services, we automatically collect:
- Trading activity: simulated trades, account balances, profit/loss history within the Services.
- Device and usage information: IP address, browser type, operating system, pages visited, time spent, referring URL.
- Cookies and similar technologies: as described in Section 9.
1.3 Information from Third Parties
We may receive information about you from:
- Payment processors (transaction confirmation, fraud signals);
- Identity verification providers (KYC results);
- Analytics providers (aggregated usage data).
2. How We Use Information
We use your information to:
- Provide the Services: create and maintain your account, process payments, calculate and issue payouts, run our trading platform.
- Verify your identity: comply with anti-fraud, KYC, and tax-reporting requirements.
- Communicate with you: send transactional emails (account verification, password resets, payout confirmations), respond to support requests, send service announcements.
- Improve the Services: analyze usage patterns, fix bugs, develop new features.
- Detect and prevent fraud and abuse: investigate prohibited trading practices, multi-accounting, payment fraud.
- Comply with legal obligations: respond to legal requests, comply with tax laws, prevent money laundering.
We do not sell your personal information.
3. How We Share Information
We share information with:
- Service providers: companies that help us operate the Services, including payment processors (e.g., Stripe), identity verification providers, email providers (e.g., Resend), database hosts (e.g., Supabase), and analytics tools. These providers are contractually required to protect your information.
- Legal authorities: when required by law, court order, or to protect our rights or the safety of others.
- Business transfers: in connection with a merger, acquisition, or sale of all or part of our business, your information may be transferred to the acquiring party.
- With your consent: any other sharing not described above will only occur with your explicit consent.
4. Data Retention
We retain your information for as long as your account is active and as needed to:
- Provide the Services and process payouts;
- Comply with legal obligations (tax records, anti-money-laundering records — typically 5–7 years);
- Resolve disputes and enforce agreements.
If you close your account, we will delete or anonymize your personal information within a reasonable period after the legal retention requirements have lapsed, except where retention is required by law.
5. Data Security
We take reasonable measures to protect your information, including:
- Encryption of data in transit (TLS/HTTPS) and at rest;
- Access controls limiting who can view your information;
- Industry-standard authentication for our database and admin systems;
- Payment card information processed by PCI-compliant payment processors (we do not store full card numbers).
However, no security system is impenetrable. We cannot guarantee absolute security and you provide information at your own risk.
6. Your Rights and Choices
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Delete your information (subject to legal retention requirements);
- Object to or restrict processing of your information;
- Port your information to another service;
- Withdraw consent for processing based on consent;
- Lodge a complaint with a privacy regulator.
To exercise these rights, email us at support@upticktrader.com. We will respond within thirty (30) days.
7. Children's Privacy
The Services are not intended for individuals under 18. We do not knowingly collect information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete it promptly.
8. International Users
Uptick Trader is based in the United States. If you access the Services from outside the United States, your information will be transferred to, processed, and stored in the United States. The data protection laws of the United States may differ from those in your country.
9. Cookies and Tracking
We use cookies and similar technologies for:
- Essential cookies: required for authentication and core functionality. Cannot be disabled.
- Analytics cookies: help us understand how the Services are used (anonymized).
- Functional cookies: remember preferences such as theme or language.
You can control cookies through your browser settings. Disabling essential cookies will break core functionality (login, etc.).
10. California Privacy Rights (CCPA)
California residents have specific rights under the California Consumer Privacy Act (CCPA), including:
- The right to know what personal information we collect, use, disclose, and sell;
- The right to delete personal information we hold about you;
- The right to opt out of the "sale" of personal information (note: we do not sell personal information);
- The right to non-discrimination for exercising your rights.
To exercise these rights, email support@upticktrader.com with "CCPA Request" in the subject line.
11. European Users (GDPR)
If you are in the European Economic Area, United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or equivalent local law applies. Our legal bases for processing your information are:
- Contract: processing necessary to provide the Services;
- Legal obligation: processing required to comply with law (tax, KYC, AML);
- Legitimate interest: processing for fraud prevention, security, and service improvement;
- Consent: for non-essential cookies and marketing communications.
You have the rights listed in Section 6 and may also lodge complaints with your local data protection authority.
[REVIEW: If you plan to actively market to or accept users from the EU, your lawyer should confirm GDPR compliance including data processing agreements with all sub-processors, appointment of an EU representative if required, and Data Protection Impact Assessment for the payout processing flow.]
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or by prominent notice on the Services. Your continued use of the Services after changes take effect constitutes acceptance.
13. Contact Us
For privacy questions, requests, or complaints, contact:
Uptick Trader LLC
Email: support@upticktrader.com
Mailing Address: [BUSINESS ADDRESS TO BE ADDED]
[REVIEW NEEDED: This Privacy Policy is a starting template. Have a qualified attorney review for compliance with CCPA, GDPR, and other applicable privacy laws based on your actual data flows. Items in [BRACKETS] need actual values.]