Privacy Policy
Updated: 2026-10-10
We collect only what’s necessary to operate the product: authentication, academy progress, trading journal entries, and basic analytics. We do not sell personal data.
Data we collect
- Account: email and technical session identifiers.
- Product data: learning progress, journal entries, watchlists/presets.
- Technical events: errors and security events (e.g., sign-in/sign-out).
How we use it
- Provide the service, recover access, and keep it secure.
- Reasonable product analytics to improve UX.
- Support and issue resolution.
Retention & deletion
- We retain data as long as needed to provide the service.
- You can request account deletion, except where legal obligations apply.
Third parties
- We share data only with vendors required to operate the service (hosting, email), and only as needed.
- We do not sell data or use it for ad networks (MVP policy).
Partner program
- If you arrive through a partner link or enter a promo code at signup, we store the code itself, the signup date and technical referral signals (IP and user-agent) — solely to link the account to the partner and to protect the program from gaming.
- The partner does NOT receive your name or email address. Their dashboard shows only a masked email (e.g. a***@gmail.com), the signup date and an activity flag — enough to track statistics, not enough to identify you.
- Full access to the names and emails of referred users is limited to the governing role (commander) and is opened manually, one user at a time, for dispute resolution and payouts.
- Post-signup survey answers (“how did you hear about us”, “what are your goals”) are stored de-identified for partners and are used for statistics and product improvement. You may skip the promo code — then nothing is linked to a partner.
- All of this data is processed for security and statistics; it is never sold or shared with ad networks.
Contact
- Privacy questions: support@zx500.app (replace with a real address).
Draft. Before publishing, review with a lawyer and add legal entity details (owner, address, DPA/processor, cookies, etc.).