Privacy Policy

1. Overview

GoldPal ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and share information when you use our gold portfolio tracking platform and related services.

2. What We Collect

We collect the following types of information:

• Account Information: Email address, nickname, and profile information when you create an account via Google or GitHub OAuth.
• Portfolio Data: Gold holdings, purchase prices, and transaction history you choose to track.
• Usage Data: How you interact with our platform, including pages visited and features used.
• Payment Information: Billing details processed securely through Stripe for premium subscriptions.

3. How We Use Information

We use your information to:

• Provide and improve our portfolio tracking services
• Generate leaderboard rankings (using only your public nickname)
• Send price alerts
• Process payments and manage subscriptions
• Ensure platform security and prevent abuse

4. Third-Party Integrations

We integrate with the following services:

• Google OAuth: For secure authentication
• GitHub OAuth: For secure authentication
• Stripe: For payment processing (we never store your card details)
• Cloudflare: For security and performance

5. Security and Data Protection

We implement industry-standard security measures including SSL/TLS encryption, secure authentication, and regular security audits. Payment processing is handled entirely by Stripe, a PCI-compliant payment processor.

6. Cookies

We use minimal, essential cookies to maintain your session and remember your preferences (like dark mode). We do not use tracking or advertising cookies.

7. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share data only when required by law or to protect our rights and safety of users.

8. Data Retention and Deletion

You can delete your account and all associated data at any time from your profile settings. Upon deletion, we remove your personal information within 30 days, except where retention is required by law.

9. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and data
• Export your portfolio data
• Opt out of non-essential communications

10. Contact

For privacy-related questions or requests, please contact us at [email protected] or visit our contact page.