Privacy Policy

Who We Are

Elite Analytic ("Elite Analytic," "we," "our," or "us") operates the Elite Analytic platform — an AI-powered trading journal and performance analytics service accessible at eliteanalytic.com and related subdomains (collectively, the "Service").

We are the data controller for personal information collected through our Service. If you have any questions about this Privacy Policy or our data practices, please contact us at the address provided in Section 13.

Information We Collect

We collect information you provide directly to us, information collected automatically when you use the Service, and in some cases information from third parties.

2.1 Information You Provide

• Account Registration: Name, email address, password (stored as a secure hash), and optionally a profile photo.
• Trade Data: Trade entries including instrument, direction (long/short), entry and exit prices, quantities, timestamps, screenshots, notes, emotion tags, and any custom fields you create. This is the core data powering the Service.
• Payment Information: When you subscribe to a paid plan, payment is processed by our third-party payment processor (Stripe). We do not store your full card number, CVC, or banking details. We retain only a tokenized reference, your billing email, and subscription metadata.
• Communications: Messages you send to our support team, feedback you submit, or responses to surveys.
• Neural Reset Data: If you use the Neural Reset mindset feature, we collect session metadata, your self-reported stress and focus scores, and optional notes. This data is used solely to generate your Psychological Health score and wellness trends within the Service.

2.2 Information Collected Automatically

• Usage Data: Pages and features accessed, actions taken within the platform, session duration, and feature engagement metrics.
• Device & Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and time zone.
• Log Data: Server-side logs including request timestamps, API call records, and error reports.
• Cookies & Similar Technologies: See Section 9 for full details on how we use cookies.

2.3 Information from Third Parties

• If you connect a brokerage account or import data via CSV, we receive the trade data you authorise for import. We do not access accounts beyond the scope of that authorisation.
• If you sign in via a third-party service (e.g., Google OAuth), we receive your name and email address from that provider, subject to their privacy policy.

How We Use Your Information

We use the information we collect for the following purposes:

• Providing and improving the Service: Powering all platform features including analytics, AI-generated insights, the Quant Lab simulator, and Neural Reset sessions.
• AI & Machine Learning: Your trade data is used to generate personalised AI insights (behavioral pattern detection, weekly debrief reports, consistency scores) within your private account. We do not use individual users' trade data to train shared models without explicit opt-in consent.
• Account management: Creating and managing your account, processing subscriptions, and handling billing.
• Customer support: Responding to your questions, resolving issues, and communicating service updates.
• Security and fraud prevention: Detecting, investigating, and preventing unauthorised access and fraudulent activity.
• Analytics and product development: Understanding how users interact with the Service (using aggregated, anonymised data) to improve features and user experience.
• Legal compliance: Meeting our obligations under applicable laws, responding to lawful requests from public authorities, and enforcing our Terms of Service.
• Marketing communications: Sending you product updates, newsletters, and promotional offers — only if you have opted in. You may opt out at any time.

Legal Basis for Processing (EEA / UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal basis for processing your personal data is as follows:

• Contract performance: Processing necessary to provide the Service you have subscribed to (e.g., storing your trade journal, generating analytics).
• Legitimate interests: Operating and improving the Service, ensuring security, preventing fraud, and conducting internal analytics — where these interests are not overridden by your data protection rights.
• Legal obligation: Processing required by applicable law (e.g., retaining billing records for tax purposes).
• Consent: For optional processing such as marketing emails or participation in research programs. You may withdraw consent at any time.

Data Sharing & Third Parties

We do not sell your personal data or trade data to any third party. We may share your information only in the following limited circumstances:

• Service Providers (Processors): We work with carefully vetted third-party vendors who process data on our behalf, including: cloud hosting (e.g., AWS, Google Cloud), payment processing (Stripe), transactional email (e.g., Postmark), error monitoring (e.g., Sentry), and analytics infrastructure. These providers are contractually bound to use your data only as instructed by us and to maintain appropriate security standards.
• Legal Requirements: We may disclose your information if required by law, regulation, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on the Service at least 30 days before any such transfer takes effect, and the acquiring entity must agree to honor this Privacy Policy.
• With Your Consent: We may share your information for any other purpose with your explicit prior consent.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. Specifically:

• Active accounts: All data is retained for the duration of your account.
• After account deletion: Upon your request to delete your account, we will delete or anonymise your personal data within 30 days, except for data we are required to retain under applicable law (e.g., billing records retained for up to 7 years for tax purposes).
• Inactive accounts: Accounts with no login activity for 24 consecutive months may receive a notice prior to data deletion. We will provide at least 30 days' advance notice before any deletion.
• Backups: Deleted data may persist in encrypted backup systems for up to 90 days before being permanently overwritten.

Security

We implement industry-standard technical and organisational security measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS 1.2 or higher.
• Encryption of sensitive data at rest using AES-256.
• Access controls and role-based permissions for internal staff.
• Regular security audits and vulnerability assessments.
• Multi-factor authentication options for user accounts.
• Incident response procedures in place to handle security breaches.

While we take all reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. In the event of a data breach that poses a high risk to your rights, we will notify you and the relevant supervisory authority as required by applicable law, within 72 hours of becoming aware of the breach.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements.
• Restriction: Request that we limit how we process your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format and transfer it to another controller.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw Consent: Withdraw any previously given consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Automated Decision-Making: Not be subject to decisions based solely on automated processing that produce significant legal or similarly significant effects on you.

To exercise any of these rights, please contact us at privacy@eliteanalytic.com. We will respond within 30 days (or within any shorter period required by applicable law). We may need to verify your identity before processing certain requests.

If you are in the EEA or UK and believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection supervisory authority.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the "sale" of personal information. We do not sell personal information. To submit a CCPA request, contact us at privacy@eliteanalytic.com.

Cookies

We use cookies and similar tracking technologies to operate and improve the Service. For full details on the specific cookies we use, your choices, and how to manage them, please see our Cookie Policy.

In summary, we use:

• Strictly Necessary Cookies: Essential for the Service to function (e.g., authentication session tokens). These cannot be disabled.
• Performance/Analytics Cookies: Help us understand how users interact with the platform (aggregated, anonymised).
• Functional Cookies: Remember your preferences (e.g., theme, dashboard layout).

You can manage your cookie preferences through your browser settings or our cookie consent manager. Disabling certain cookies may affect Service functionality.

Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18 without verified parental consent, we will take steps to delete that information promptly.

If you believe that a child under 18 has provided us with personal data, please contact us at privacy@eliteanalytic.com.

International Data Transfers

Elite Analytic operates globally. Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those of your country.

Where we transfer personal data from the EEA, the UK, or Switzerland to countries not providing an equivalent level of data protection, we implement appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Data processing agreements with all sub-processors that impose equivalent obligations.
• Adequacy decisions by the European Commission, where applicable.

You may request a copy of the relevant safeguards by contacting us at privacy@eliteanalytic.com.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy.
• Notify you by email (to the address associated with your account) at least 14 days before the changes take effect.
• Display a prominent notice within the Service.

Your continued use of the Service after the effective date of the updated policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you may close your account prior to the effective date.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: