Privacy policy

This Privacy Policy explains how Alchemyfolio ("Alchemyfolio", "we", "us" or "our"), a business based in Edmonton, Alberta, Canada, collects, uses, discloses and protects personal information when you use alchemyfolio.com, the Alchemyfolio web application and related services (the "Service").

We handle personal information in line with Alberta's Personal Information Protection Act (PIPA) and, where it applies, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). By using the Service you consent to the collection, use and disclosure of your personal information as described in this policy.

1. Information we collect

Account information: your name, email address, time zone, language, theme and notification choices, onboarding answers such as how you trade and how you found us, and whether two-factor authentication is turned on.

Trading information: trading accounts you add or connect, including broker, platform, account number, balance, equity, deposits, withdrawals and trade history, and anything you add such as notes, tags, emotions, mistakes, playbooks and screenshots.

Connection information: if you connect MetaTrader, your investor (read-only) password is passed once to our connection provider to open a read-only connection and is not stored by us. If you connect cTrader, you sign in with Spotware and we receive an access token. If you use our Expert Advisor, we store a sync key for that account.

Payment information: when you buy a plan, Whop processes the payment. We receive the plan, amount, currency, payment and membership identifiers and payment status. We do not receive or store your full card number.

Support and chat information: messages you send to the AI assistant or our team, and any information you include in them.

Usage and device information: pages visited, referring site, device type, a random visitor identifier, IP address, browser details, and log and security records such as sign-in times and failed attempts.

Cookies and local storage: we use essential cookies to keep you signed in and remember your choices, and local storage on your device for preferences such as theme, calculator entries and templates and chat history. We do not use third-party advertising cookies.

2. How we use your information

We use personal information to: create and run your account and sign you in; sync, import, store and analyse your trades and show your statistics, reports and insights; process payments, send receipts and manage plan access; answer support requests and run the AI assistant; send codes, security alerts and service messages; send product news if you opt in; keep the Service secure, prevent fraud and abuse and enforce our Terms; understand usage and improve the Service; and comply with legal, tax and accounting obligations.

We may create anonymized or aggregated information that does not identify you and use it for any lawful purpose, including analytics and product improvement.

3. Consent

We collect, use and disclose personal information with your consent, which you give by using the Service and as described in this policy, or as otherwise permitted or required by law. You can withdraw consent at any time by changing your settings, unsubscribing from news emails or deleting your account, subject to legal or contractual restrictions. If you withdraw consent, we may not be able to provide some or all of the Service.

4. How we share information

We do not sell your personal information. We share it only as follows.

Service providers who process information for us under contracts that require them to protect it and use it only for our purposes, including: hosting, database and storage providers; Whop for payments; MetaApi for MetaTrader connections; Spotware for cTrader; Google and Firebase for Google sign-in; email delivery providers; and translation, economic calendar and exchange-rate providers.

Legal and safety: when required or permitted by law, such as to comply with a subpoena, court order or request from a regulator or law enforcement, to protect our rights, property or safety or those of our users or the public, or to investigate fraud or abuse.

Business transfers: in connection with a merger, financing, acquisition, reorganization or sale of all or part of our business, subject to confidentiality obligations.

With your direction: when you ask us to, for example by connecting a third-party account.

5. Where information is stored

Our service providers may store and process personal information outside Alberta and Canada, including in the United States and the European Union. Information stored outside Canada is subject to the laws of that country and may be accessed by its courts, law enforcement and national security authorities. You can contact our Privacy Officer for information about our policies and practices for service providers outside Canada.

6. How long we keep information

We keep personal information only as long as needed for the purposes in this policy. Account and trading information is kept while your account is open. Support chats are kept for up to 30 days. Payment and tax records are kept for as long as Canadian tax and accounting laws require, generally six years. Security and log records are kept for a limited time. When you delete your account, we delete or anonymize your account and trading information within a reasonable time, except where we must keep it for legal, tax, security or dispute purposes. Backups are overwritten on their normal cycle.

7. How we protect information

We use reasonable administrative, technical and physical safeguards, including encryption in transit, encryption of stored connection secrets, one-time sign-in codes, optional two-factor authentication and restricted staff access. No system is completely secure and we cannot guarantee the security of information. You are responsible for keeping your email account and devices secure.

If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the Office of the Information and Privacy Commissioner of Alberta, and any other authority, as required by law.

8. Your rights

You can view and update most of your information in Settings, export your trades as CSV and delete your account at any time. Under PIPA and PIPEDA you may also ask for access to the personal information we hold about you, ask us to correct it, and ask how it has been used and disclosed.

Send requests to hello@alchemyfolio.com. We may need to verify your identity. We will respond within 45 days, or within the time the law allows, and may refuse a request where the law permits, explaining why.

9. Marketing emails

We send product news only if you opt in. You can unsubscribe at any time from the link in any news email or in Settings. We will still send codes, receipts, security alerts and other service messages while your account is open.

10. Children

The Service is not intended for anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has given us personal information, contact us and we will delete it.

11. Third-party sites and services

The Service links to and works with third-party services such as Whop, brokers and trading platforms. Their handling of your information is governed by their own privacy policies, and we are not responsible for them.

12. Changes to this policy

We may update this policy at any time. The updated version takes effect when posted on this page, and the "Last updated" date will change. For material changes we will make reasonable efforts to notify you by email or in the app. Continuing to use the Service after the update means you accept it.

13. Contact and complaints

Questions, requests and complaints can be sent to our Privacy Officer: Privacy Officer, Alchemyfolio, Edmonton, Alberta, Canada. Email: hello@alchemyfolio.com.

If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).