Privacy Policy

# MarkovLab — Privacy Policy

_Last updated: 2026-07-26_

## What we collect

- **Account data:** email address, display name, and country/region, and your
  Google account identifier and profile picture when you sign in with Google.
- **Billing data:** payment-processor customer and subscription identifiers
  (from Stripe and, where applicable, Paddle). We do not store full card
  numbers; card and bank details are handled entirely by our payment
  processors.
- **Broker connection data:** broker API credentials you choose to link
  (encrypted at rest) and the account data we read on your behalf (positions,
  balances, orders, trade history) to provide the Service.
- **Product data:** trade ideas, journal entries, settings, watchlists, and
  alerts you create within MarkovLab.
- **Technical data:** request metadata (IP address, user agent, timestamps) used
  for security, abuse prevention, and bot protection (e.g., Cloudflare Turnstile).

## How we use it

- To operate, secure, and authenticate access to the Service.
- To read market and account data from brokers you authorize, and — only when you
  explicitly initiate an order — to transmit that order to your connected broker.
- To bill recurring subscriptions through our payment processors (Stripe
  and, where applicable, Paddle).
- To detect and prevent fraud and abuse, and to enforce our Terms.
- To generate aggregated, anonymized, or de-identified analytics for product
  improvement and research.

## What we do not do

- We do **not** sell your personal data or broker data.
- We do **not** display your account, positions, or trade ideas to other users.
- We do **not** trade on a discretionary basis without your specific instruction.

## Cookies and sessions

We use secure, HTTP-only cookies for session management. We do not use
third-party advertising cookies.

## Data location, security, and retention

Data is stored on managed cloud infrastructure with access controls and
encryption of sensitive fields. We retain your data while your account is active
and as needed to comply with legal, tax, and accounting obligations. You may
request export or deletion of your account data by emailing us; we honour valid
requests within 30 days, subject to those obligations.

## International users

MarkovLab is available to users in multiple jurisdictions. By using the Service
you consent to the processing of your data as described in this Policy, which may
involve transfer to and storage in countries other than your own.

## Children

The Service is not directed to anyone under 18, and we do not knowingly collect
data from minors.

## Contact

Privacy questions or data requests: info@markovlab.app