Your information,
handled carefully.

Effective date: [add launch date]

Information we collect

When you register, we store your email address and a one-way Argon2id password hash in MongoDB. We also store account verification and password reset token hashes, session records, membership status, and PayPal transaction or subscription reference IDs. We do not store PayPal passwords or payment card numbers.

How we use information

We use account information to sign you in, verify your email, deliver courses and membership access, send account and payment onboarding emails, provide a private Discord invitation after confirmed payment, and respond to support requests.

Service providers

PayPal processes payments and recurring billing. MongoDB hosts account and membership records. Our email provider delivers verification, password reset, and member onboarding email. Discord hosts the member community. [Identify the actual providers and hosting locations before launch.]

Security and retention

We use password hashing, expiring one-time tokens, rate-limited authentication, server-side sessions, and HTTPS in production. No online service can guarantee absolute security. [Define account deletion, backup, log, and payment-record retention periods, and provide a deletion request process.]

Your choices and contact

You can change your password using the reset flow and cancel a monthly subscription from your account. For access, correction, or deletion requests, contact [privacy contact email]. TradeVault is operated by [legal business name] in [jurisdiction].

Updates

We may update this notice as the service changes. We will post the current effective date at the top of this page.