Privacy Policy

1. Introduction

FundedMind (“we,” “us,” or “our”) operates a web-based educational platform that helps traders improve their psychological discipline through lessons, simulated trading scenarios, and practice exercises. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

We collect the following categories of personal information:

Account Information. When you create an account, we collect your name and email address through our authentication provider, Clerk. You may also sign up using a third-party account (such as Google), in which case we receive your name and email from that provider.

Usage and Progress Data. We collect data about your activity within the Service, including lesson completions, quiz answers, practice session results, scores, streaks, experience points, and learning progress. This data is used to provide the Service and track your development.

Payment Information. When you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number, CVV, or full card details on our servers. Stripe collects and processes your payment information directly and shares with us only the information necessary to manage your subscription (such as subscription status, plan type, and billing period). For more information, see Stripe's Privacy Policy.

Device and Access Data. When you access the Service, certain information is automatically collected by our hosting and infrastructure providers, including your IP address, browser type, operating system, device type, approximate geographic location (derived from IP address), and pages visited. This data is collected by Vercel (our hosting provider) and Clerk (our authentication provider) as part of delivering and securing the Service.

Feedback. If you submit feedback, bug reports, or feature requests through the Service, we collect the content of your submission and, if you are logged in, your user identity.

3. How We Use Your Information

We use your personal information to:

• Provide, operate, and maintain the Service
• Authenticate your identity and manage your account
• Track your learning progress, scores, and streaks
• Process payments and manage your subscription
• Respond to your feedback, questions, and support requests
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations
• Improve and develop the Service

We do not use your personal information for advertising or sell it to third parties.

4. Third-Party Service Providers

We share your personal information with the following third-party service providers who assist us in operating the Service. Each provider processes data only as necessary to perform their function and is bound by their own privacy policies:

Clerk (authentication). Handles user sign-up, sign-in, and session management. Collects your email, name, IP address, and device information. See Clerk's Privacy Policy.

Stripe (payment processing). Processes subscription payments and manages billing. Collects payment card details, billing address, and transaction data. We never see or store your full card number. See Stripe's Privacy Policy.

Vercel (hosting and content delivery). Hosts and delivers the Service. Automatically collects IP addresses, access logs, and approximate location data as part of serving web pages. See Vercel's Privacy Policy.

Supabase (database hosting). Stores your account data, learning progress, and application data in a managed PostgreSQL database. See Supabase's Privacy Policy.

We do not sell, rent, or trade your personal information to any third party. We only share data with the providers listed above as necessary to operate the Service.

5. Cookies and Tracking

The Service uses cookies that are strictly necessary for authentication and security. These cookies are set by Clerk to manage your login session and by the Service to remember your theme preference. We do not use advertising cookies, tracking pixels, or third-party analytics services. We do not engage in cross-site tracking or interest-based advertising.

6. Data Security

We implement industry-standard security measures to protect your personal information, including HTTPS encryption for all data in transit, secure authentication via Clerk, PCI-compliant payment processing via Stripe (your card details never touch our servers), rate limiting, input validation, and security headers (Content Security Policy, HSTS, and others).

Despite these measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information using commercially reasonable safeguards.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law (for example, billing records for tax purposes). Stripe and Clerk may retain certain data independently in accordance with their own retention policies.

8. International Data Transfers

The Service is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer. Our service providers (Clerk, Stripe, Vercel, and Supabase) may also process data in the United States and other countries where they maintain facilities.

9. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your account and personal information.
• Portability: Request your data in a structured, commonly used format.
• Objection: Object to certain processing of your information.

To exercise any of these rights, contact us at fundedmind@protonmail.com. We will respond to your request within 30 days.

California Residents (CCPA). If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email address above.

10. Children's Privacy

The Service is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at fundedmind@protonmail.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at fundedmind@protonmail.com. We aim to respond to all inquiries within 24 hours.