1. Information We Collect

1.1 Account Information

We collect information you provide when you create an account through third-party OAuth providers. Depending on the sign-in method you choose, this may include:

• X (Twitter) OAuth: display name, username, profile image URL
• Google OAuth: email address, display name, profile image URL
• Apple Sign-In: email address (may be a private relay address), display name

We do not collect or store passwords. Authentication is handled entirely through third-party OAuth providers and AWS Cognito.

1.2 Usage Data

We automatically collect certain information when you access and use the Service, including:

• Trading activity (orders, fills, portfolio changes)
• Features accessed and pages viewed
• Interaction patterns and session duration
• Error logs and performance data

1.3 Device Information

When you access the Service, we may collect device-level information, including:

• Device type, operating system, and version
• Browser type and version
• IP address
• Push notification tokens (if you enable push notifications)

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To create and manage your account, process trades, maintain your portfolio, and deliver the core functionality of the platform.
• Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical support.
• Marketing Communications: To send you promotional content, announcements, and updates about the Service (subject to your consent and opt-out rights).
• Service Improvement: To analyze usage patterns, diagnose technical issues, optimize performance, and develop new features.
• Security and Fraud Prevention: To detect and prevent unauthorized access, abuse, and fraudulent activity.
• Legal Compliance: To comply with applicable laws, regulations, and legal obligations.

3. Information Sharing & Third Parties

We do not sell your personal information. We may share your information with the following third parties solely for the purposes described in this policy:

• Stripe: Payment processing for web-based subscriptions and purchases. Stripe receives payment card details directly; we do not store card numbers.
• Apple (In-App Purchases): For iOS subscription management via Apple IAP. Apple processes payments directly.
• Amazon Web Services (AWS): Cloud infrastructure provider. Your data is stored and processed on AWS servers in the Asia Pacific (Seoul) region (ap-northeast-2).
• AWS Cognito: User authentication and identity management.

We may also disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Supersis, our users, or the public.

4. Data Retention

We retain your information for the following periods:

After the retention period expires, data is securely deleted or anonymized. You may request earlier deletion of your data as described in Section 5.

5. Your Rights

You have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete information.
• Right to Deletion: You may request that we delete your personal information and account. Upon deletion, trading records may be retained for the legally required period.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time by contacting us.
• Right to Opt-Out of Marketing: You may opt out of marketing communications at any time (see Marketing Opt-out).

To exercise any of these rights, please contact us at supersis@supersis.io. We will respond to your request within 30 days.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Service. These include:

• Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
• Functional Cookies: Used to remember your preferences (e.g., language settings, display preferences).
• Analytics Cookies: Used to understand how users interact with the Service and to improve performance.

You may control cookie settings through your browser preferences. Disabling essential cookies may impair the functionality of the Service.

7. Children's Privacy

The Service is intended for users who are at least 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a minor, please contact us at supersis@supersis.io.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on the Service with a new "Last Updated" date. Your continued use of the Service after the effective date of the updated policy constitutes your acceptance of the changes.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: