Privacy Policy
1. What we collect
- Account data: email, username, password hash (via Supabase)
- Profile data: avatar, bio, social follow graph
- Usage data: pages visited, features used, session timestamps, active-session inventory (for account-sharing detection)
- Payment data: billing address, last 4 digits, subscription status (collected and stored by Stripe; we do not store full card numbers)
- User-generated content: posts, comments, direct messages, paper trades, AI chat conversations
- Device & network data: IP address, browser, OS, device type (collected via standard server logs)
- Legal-acceptance ledger: when you accept our Terms, Privacy Policy, or Disclaimer, we store your user ID, the document version, a timestamp, your IP address, and your user-agent string. This ledger is retained for the duration of your account and beyond if needed to defend a legal claim
2. How we use it
- Provide and improve the Service
- Authenticate you and prevent abuse
- Process payments and manage subscriptions
- Send transactional emails (account confirmations, billing, security)
- Generate aggregated analytics about Service usage
- Audit and review AI chat output for safety (see Section 5)
3. Who we share with (sub-processors)
We share data only with service providers required to operate the Service. We have signed (or rely on the publicly published) Data Processing Addenda where applicable. Sub-processor list:
- Supabase — authentication, application database. Data region: United States (US East). DPA: supabase.com/legal/dpa
- Stripe — payment processing, subscription billing. Data region: United States with global affiliates. DPA: stripe.com/legal/dpa
- Anthropic — AI chat model provider. Prompts you send to Snipa Algo are transmitted to Anthropic to generate responses. Data region: United States. Terms: anthropic.com/legal/aup
- ThetaData — options market data feed. No personal data is shared with ThetaData; data flows from them to us
- Hosting / CDN providers — standard server, edge cache, and access logs (US data centers)
We do not sell personal data. We do not share data with advertisers. We may disclose data to comply with law or court order. If we acquire or are acquired by another company, your data may transfer as part of that transaction; you will be notified before the transfer takes effect.
4. Your choices
- Update or delete your profile in Settings
- Cancel your subscription at any time
- Request deletion of your account: legal@fullreturnclub.com
- Opt out of non-essential cookies via browser settings
5. AI conversation data
Conversations with Snipa Algo are logged with your user ID, timestamp, prompt, and response. We retain this log for safety auditing (detecting harmful or misleading AI output) and for legal defense if a dispute arises. We do not use your conversations to train models without your explicit consent.
6. California rights (CCPA)
California residents may request to know what personal data we hold about them, request deletion, and opt out of "sale" of personal information. We do not sell personal information. Email legal@fullreturnclub.com to exercise these rights.
7. EU/UK rights (GDPR)
EU/UK residents have the right to access, rectify, erase, restrict processing, and port their personal data. We process EU/UK data under the legitimate interest and contractual necessity bases. Email legal@fullreturnclub.com to exercise these rights.
8. Cookies
We use cookies for authentication, session state, and basic analytics. Disabling cookies will break login and most features.
9. Data retention
We retain account data while your account is active. Deleted accounts: personal data is purged within 30 days, except where retention is required by law (e.g., tax records) or for legitimate legal defense (e.g., AI audit logs may be retained longer when material to a dispute).
10. Children
The Service is not directed at children under 18. We do not knowingly collect data from children. If you believe a child has provided us data, email us and we will delete it.
11. Changes
Material changes will require re-acceptance on next login. The "Last updated" date above reflects the current revision.
12. Filing a complaint
If you believe we have mishandled your personal data, please contact us first at legal@fullreturnclub.com — we respond to privacy complaints within 30 days.
Residents of the European Union and United Kingdom have the right to file a complaint with their national supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu. UK residents may file with the Information Commissioner's Office at ico.org.uk. Note that FRC is only offered to US residents (see Terms Section 1) — if you are an EU/UK resident you should not have an account, and we will close it upon discovery.
13. Contact
Privacy questions: legal@fullreturnclub.com
