<?php
// Public legal page — no auth required, same "logged-in vs. logged-out nav"
// convention as pricing.php. Body text is Kevin's own, as written
// (TraderAlign_Privacy_Policy.md, 2026-08-11) — only reformatted from
// Markdown into this page's existing HTML/CSS shell, contact email
// swapped to his real interim address, and the source doc's two em
// dashes replaced with plain punctuation. No wording was rewritten.
$isLoggedIn = $auth->isLoggedIn();
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Privacy Policy - TraderAlign</title>
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet">
<link rel="stylesheet" href="/traderalign/assets/tokens.css">
<link rel="icon" type="image/png" sizes="32x32" href="/traderalign/assets/favicon/favicon-32.png">
    <link rel="icon" type="image/png" sizes="16x16" href="/traderalign/assets/favicon/favicon-16.png">
    <link rel="apple-touch-icon" sizes="180x180" href="/traderalign/assets/favicon/apple-touch-icon.png">
    <link rel="shortcut icon" href="/traderalign/assets/favicon/favicon.ico">
<link rel="stylesheet" href="/traderalign/assets/css/brand.css">
<?php require __DIR__ . '/legal-page.css.php'; ?>
</head>
<body>
<div class="legal-page">
    <div class="legal-nav">
        <a href="/traderalign/" class="ta-brand"><img src="/traderalign/images/logo.png" alt="" class="ta-logo ta-logo--md"><span class="ta-word">TraderAlign</span></a>
        <div class="legal-nav-links">
            <?php if ($isLoggedIn): ?>
                <a href="/traderalign/dashboard">Dashboard</a>
            <?php else: ?>
                <a href="/traderalign/sign-in">Sign In</a>
                <a href="/traderalign/sign-up" class="btn btn-primary">Get Started</a>
            <?php endif; ?>
        </div>
    </div>

    <h1>Privacy Policy</h1>
    <p class="legal-updated">Last updated: August 2026</p>

    <p>This Privacy Policy explains what information TraderAlign ("we," "us," or "our") collects when you use our platform, how we use that information, and the choices available to you.</p>

    <h2>1. Information We Collect</h2>
    <p><strong>Account information.</strong> This includes your email address, password (stored as a salted hash, never in plain text), and any optional profile details you choose to provide, such as your preferred username, trading style, primary broker, base currency, and time zone.</p>
    <p><strong>Content you create.</strong> This includes any data you enter into the platform, such as position sizing calculations, trading strategies, checklists, account or challenge data, trade journal entries, and mood or confidence notes. This content is never marketed, sold, or shared with third parties. It is used solely to power your journal and analytics.</p>
    <p><strong>Broker statement data.</strong> When you upload a broker statement (for example, an MT5 statement) for reconciliation, we process the trade history it contains, including symbols, prices, timestamps, and profit/loss figures, and match it against the trades you've journaled.</p>
    <p><strong>Technical information.</strong> Like most platforms, we collect standard technical data to maintain site integrity and security, such as IP address, browser type, and pages visited.</p>

    <h2>2. How We Use Information</h2>
    <ul>
        <li><strong>Core product features.</strong> To provide the Calculator, journal, reports, and analytics.</li>
        <li><strong>Colex AI coaching.</strong> To power Colex, TraderAlign's AI coaching feature, relevant trade and account data is shared with our AI service provider, Anthropic, solely to generate a response to your request. We do not share your information with Anthropic for any other purpose.</li>
        <li><strong>Live currency conversion.</strong> The Calculator uses third-party foreign exchange rate providers to retrieve current exchange rates. Only the rate itself is requested. No trading information is shared with these providers.</li>
        <li><strong>Account communications.</strong> To contact you about your account, security matters, and, if you opt in, product updates.</li>
        <li><strong>Platform security.</strong> To help protect the security and integrity of the platform.</li>
    </ul>

    <h2>3. Data Retention</h2>
    <p>Your trading history and account information are retained for as long as your account remains active. If you delete your account, your personal information will be deleted within a reasonable time frame, except where retention is required for legal, safety, or anti-fraud purposes.</p>

    <h2>4. Your Rights</h2>
    <p>You may access, correct, or delete your data at any time. Profile fields can be edited directly from your <a href="/traderalign/settings">account settings</a> page. For any other requests or questions regarding your data, please contact us using the details in Section 8.</p>

    <h2>5. Cookies &amp; Sessions</h2>
    <p>TraderAlign uses a session cookie to support login functionality, consistent with standard practice for login-based websites. We do not use third-party advertising cookies or tracking.</p>

    <h2>6. Data Security</h2>
    <p>Data is encrypted at rest. Account passwords and any optional notes you save (such as broker login reminders) are also stored encrypted. No system can guarantee absolute security, but we take reasonable, industry-standard precautions to protect your data.</p>

    <h2>7. Changes to This Policy</h2>
    <p>We may update this Policy from time to time as our practices evolve. Any changes will be reflected by updating the "Last updated" date at the top of this page.</p>

    <h2>8. Contact</h2>
    <p>If you have any questions about this Policy, please contact us at <a href="mailto:kelvinmwaruka@gmail.com">kelvinmwaruka@gmail.com</a>.</p>

    <div class="legal-footer">
        <a href="/traderalign/terms">Terms of Service</a> · <a href="/traderalign/risk-disclosure">Risk Disclosure</a> · <a href="/traderalign/pricing">Pricing</a>
        <?php if ($isLoggedIn): ?> · <a href="/traderalign/dashboard">← Back to Dashboard</a><?php endif; ?>
    </div>
</div>
</body>
</html>
