Privacy Policy
Last Updated: June 12, 2026 · Version 2026-06-12
This Privacy Policy explains how Ascent Terminal ("we", "us", "our") collects, uses, and protects information when you use the Service. By using the Service you agree to this policy.
1. Information We Collect
Account Information - Email address and subscription/tier information (used to deliver and manage your access key). Access keys themselves are stored only as cryptographic hashes — we cannot read your key back. - If you join our mailing list, the email address you submit.
Payment Information - Payments are processed by Stripe, Whop, or Patreon. We never receive or store full card details. We receive confirmation of payment, the product purchased, and (for delivery) your email address, and we retain records of issued and revoked access keys for billing reconciliation.
Technical & Security Information - Device information, browser type, operating system, IP address, and error logs. IP addresses are processed to protect the Service (e.g. rate limiting and temporary lockouts after repeated failed authentication). - Service activity needed to operate features you use: TradingView alerts you send us, execution/bot/exit logs (order details you initiated), and your in-app preferences. Preferences such as indicator settings, your watchlist, and remembered keys are stored in your browser's local storage on YOUR device, not on our servers.
Usage Information - Login activity, feature usage, and analytics data.
Terms-Acceptance Records - When you accept the Terms of Service, we record the accepted version, a timestamp, and a hashed identifier of your access key (not your identity) so the agreement can be evidenced.
Service Providers (processors) We use a small number of providers to run the Service: Stripe (payments), Whop/Patreon (marketplace sales), our email delivery provider (sending your access key and service emails), Cloudflare (security, content delivery), our hosting provider (servers), and Anthropic (AI market commentary — the AI is sent market data and your indicator settings for the asset you are viewing, never your personal details or credentials).
What we do NOT collect: your exchange API keys are never stored at rest on our servers — execution credentials are supplied per-request or held in your own environment, and trading account balances are never collected. The Service is non-custodial.
2. How We Use Information
We use information to:
- Provide and operate the Service;
- Manage subscriptions and process payments;
- Improve functionality, security, and performance;
- Respond to support requests;
- Detect abuse and fraud;
- Communicate updates and important notices.
Lawful bases (UK GDPR). We rely on: performance of a contract (delivering the Service, access keys, and billing); legitimate interests (security measures such as rate-limiting and lockouts, fraud prevention, service improvement); consent (the mailing list, which you can withdraw at any time via /privacy-tools); and legal obligation (tax, accounting, and lawful requests).
We will not use your data for unsolicited marketing without your consent.
3. Payment Processing
Payments are processed by third-party providers (e.g. Whop, Patreon). We do not store full payment card information. Payment data is handled according to the payment provider's own policies.
4. Data Sharing
We do not sell personal information. Information may be shared:
- With service providers strictly necessary to operate the Service;
- When legally required or in response to a valid legal process;
- To protect our rights, users, or the security of the Service.
5. Data Security
We implement reasonable technical and organisational measures to protect your information. However, no system can guarantee absolute security, and you use the Service at your own risk.
6. Data Retention
We retain information only as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. In practice: mailing-list entries are kept until you unsubscribe or request erasure; billing references are kept while your subscription is active and for reconciliation thereafter; security and error logs are short-lived and capped in size. Stored email addresses are encrypted at rest using industry-standard encryption. When no longer needed, data is securely deleted or anonymised.
7. Your Rights
Depending on your location, you may have rights to:
- Access your personal data;
- Correct inaccurate information;
- Request deletion of your data;
- Object to certain processing;
- Restrict certain processing;
- Request a portable copy of your information;
- Withdraw consent at any time where processing is based on consent;
- Complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
Self-service: you can unsubscribe from emails instantly, or trigger full automated erasure of your data (verified by a confirmation link sent to your address), at /privacy-tools — no human review of your data is involved. For anything else, contact us at the address in §12.
8. International Transfers
Some of our service providers (for example Stripe, Cloudflare, our email provider, and Anthropic) process data outside the UK, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework where the provider is certified, and standard contractual clauses.
9. Children
The Service is not directed at, and may not be used by, anyone under 18. We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.
10. Cookies and Local Storage
We use strictly-necessary browser storage rather than tracking cookies: your preferences (indicator settings, watchlist, remembered keys, acceptance state) live in your browser's local storage on your own device. We do not use third-party advertising cookies. Our infrastructure providers (e.g. Cloudflare) may set strictly-necessary cookies for security. You can clear local storage through your browser, though you will need to re-enter your key and settings.
11. Changes to This Policy
We may update this Privacy Policy periodically. Changes become effective upon posting unless otherwise stated. Continued use of the Service constitutes acceptance of any updated policy.
12. Contact
Ascent Terminal (data controller), England and Wales Privacy enquiries: support@ascentterminal.com