Legal
Privacy Policy
This policy explains what personal information TradeRig collects, how we use it, who we share it with and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Questions or requests go to support@traderig.app.
1. Who is responsible
TradeRig operates traderig.app from Alberta, Canada, and is responsible for the personal information described here. Our privacy contact can be reached at support@traderig.app.
When a school or employer sets up TradeRig for its learners, that organization decides how its learners use TradeRig, and we handle that information on its behalf as described in our School Data Agreement.
2. What we collect
- Account details: your name, email address, password (stored only in a scrambled, hashed form), account type, trade, and, if you provide them, your job title and organization.
- Billing details: your plan, billing period, subscription status and key dates, and the customer reference from Stripe. Stripe collects and stores your card details; we never receive your full card number.
- Lab and Safety activity: sessions, scores, time spent, scenarios completed, the diagnoses you write, the number of tests and readings you take, and weak areas. Circuits you build and save in the lab are kept in your browser, not on our servers.
- Class activity, for school and team accounts: the classes you join, exercises and assignments and their results, invitations, in-app notifications, and, while you have the lab open, your live progress, Build Coach issues and a few current meter readings. This live record is removed when you leave the lab.
- Messages you send us: contact form messages, demo requests (including your name, email, organization, team size and demo results), school setup requests (including a phone number, if you give one) and feedback.
- Technical information: your IP address and basic request details recorded by our hosting and database providers, the last time you were active, and automatic error reports (the page, browser and error) that help us fix problems.
3. How we use it
- to run TradeRig: sign you in, save your work, grade scenarios and show your progress;
- to give your instructor or school the class tools they have set up;
- to process payments, trials, renewals and cancellations;
- to send service emails, such as account confirmation, password resets, billing notices, and short reminders to finish setting up your account;
- to answer your messages and support requests;
- to keep TradeRig secure and prevent misuse;
- to fix errors and improve the lab, using activity patterns rather than singling anyone out;
- to meet legal and tax obligations.
4. What we do not do
- We do not sell or rent personal information.
- We do not show ads or use advertising or tracking cookies.
- We do not use your data to train AI models.
5. Consent and your choices
By creating an account or sending us a form, you consent to the uses described here. You can withdraw consent at any time by closing your account or contacting us, although some features cannot work without the information they rely on. We may keep information where the law requires it, for example billing records.
6. Who we share it with
Your school or team. If you use TradeRig through a school or employer, its administrators and instructors can see your activity there, including scores, written diagnoses, assignment progress and, while you have the lab open, your live progress.
Service providers. We use a small number of providers to run TradeRig. They may only use the information to provide their service to us:
- Supabase: database, sign-in and storage. Our database is hosted in Canada (Montreal).
- Stripe: payments, trials and subscriptions.
- Resend: sending our emails.
- Vercel: hosting the website.
- Google Fonts and jsDelivr: delivering fonts and site code to your browser. Your browser contacts them directly, so they receive your IP address.
- Have I Been Pwned: when you choose a password, your browser checks it against known data breaches by sending only the first five characters of a scrambled version. Your password itself never leaves your device.
When required by law. We may disclose information if the law requires it, or to protect the safety, rights or property of our users or TradeRig.
If TradeRig changes hands. If TradeRig is sold or merged, personal information may transfer to the new owner, who must keep protecting it as this policy describes. We will tell you before that happens.
7. Where your information is stored
Our database is in Canada. Some of our providers, such as Stripe, Resend and Vercel, process information in the United States or other countries. When that happens, the information is subject to the laws of those countries, and we rely on our agreements with those providers to protect it.
8. How long we keep it
- Your account and the activity linked to it are kept while your account is open.
- When you delete your account, it is deactivated straight away and permanently deleted after 30 days. If you log in within those 30 days, you can choose to keep it.
- Billing records are kept by Stripe and by us for as long as tax and accounting laws require.
- Messages and demo requests are kept for as long as we need them to respond and follow up. You can ask us to delete them sooner.
- Technical logs are kept by our providers for limited periods under their own policies.
9. How we protect it
Information is encrypted in transit. Access is controlled at the database level, so people can only see the records their role allows. Passwords are stored only in hashed form. Only a limited number of people at TradeRig can access customer data, and only to run and support the Service.
No system is completely secure. If a breach creates a real risk of significant harm, we will notify the people affected and the Office of the Privacy Commissioner of Canada, as PIPEDA requires.
10. Your rights
You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. Email support@traderig.app and we will respond within 30 days. If you use TradeRig through a school or employer, we may refer your request to that organization.
If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.
11. Young learners
Personal accounts are for people 16 and older. Younger learners may use TradeRig only through a school or employer account, and that organization is responsible for any consent required.
12. Changes to this policy
We will update this policy when our practices change and show the new effective date at the top. If a change materially affects you, we will email account holders before it takes effect.
13. Contact
Privacy questions and requests: support@traderig.app.