01Who we are
This Privacy Policy explains how [LEGAL ENTITY NAME], trading as STX+ ("STX+", "we", "us"), of [REGISTERED BUSINESS ADDRESS], collects, uses and protects personal data when you use stxplus.com, the STX+ dashboard, STX+ Premium, STX+ Floor and our apps (the "Service"). We are the data controller for the personal data described here. Contact us about privacy at support@stxplus.com.
02Data we collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, email address, password (stored hashed), country, phone (optional), login times | You |
| Subscription & payment | Plan, billing status, renewal dates, promo or referral code used, Stripe customer ID. We do not receive or store your full card number. | You, Stripe |
| STX+ Floor profile | Display name, handle, bio, avatar colour, privacy settings, follows, trade alert settings, notes you post | You |
| Brokerage data (only if you connect) | Broker name, account list, positions, share quantities, average cost, prices, transactions and account balance, read via SnapTrade | Your broker via SnapTrade |
| Derived Floor data | Detected entries and exits, % of portfolio, returns, dollar profit, badges, leaderboard statistics, private portfolio value history | Calculated by us |
| Usage & device | Pages viewed, features used, browser and device type, IP address, error logs | Automatically |
| Communications | Messages you send through the contact form or by email, affiliate applications | You |
We do not intentionally collect special-category data (such as health or political opinions), and we ask you not to include it in messages or posts.
03How we use your data and our legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account; provide the dashboard and Premium tools | Performance of our contract with you |
| Process subscriptions, renewals, discounts and affiliate commissions | Contract; legal obligation (tax and accounting records) |
| Connect your brokerage and run STX+ Floor features you turn on | Your consent, which you can withdraw at any time by disconnecting or changing your sharing settings |
| Show your trades, profits, rankings and badges to other members | Your consent, limited by the privacy settings you choose |
| Send service emails (sign-up, security, billing, trade alerts you enabled) | Contract; legitimate interests |
| Keep the Service secure, prevent fraud and abuse, fix errors | Legitimate interests; legal obligation |
| Improve the Service using aggregated usage information | Legitimate interests |
| Marketing emails about new features or offers | Consent, or legitimate interests for existing customers where permitted; you can opt out at any time |
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
04STX+ Floor: what other members can see
STX+ Floor is optional. Approved strategists can participate through the simulated Strategy Account and social-trading features. Brokerage data is shared only after you connect an account and leave sharing switched on.
- Visible to other signed-in members (subject to your settings): your display name, handle, bio, the broker name you connected, your Strategy activity and broker-verified entries and exits (ticker, action, price per share, % of portfolio where available, % return, holding period), your open positions as % of portfolio, your notes, badges, follower count and leaderboard statistics.
- Dollar profit and loss on your trades is shown unless you switch off "Show my dollar profits".
- Floor badges, including Sniper, Quick Draw, Shark and Whale, reflect defined trading milestones such as activity or cumulative realized profit.
- Never shown to other members: your account balance, total portfolio value, number of shares, account numbers, email address and broker login.
- Your controls: post delay (real-time to end of day), hidden tickers, leaderboard opt-out, trade-alert opt-out, pause sharing, and disconnect. Disconnecting removes your open positions from the Floor; you can ask us to delete your past posts too.
06International transfers
Some of our providers process data outside the European Economic Area, including in the United States. Where this happens we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, as applicable. You can ask us for more information about these safeguards.
07How long we keep data
- Account data: while your account is open, and up to 30 days after you close it (backups may take up to 90 days to expire).
- Billing records: as long as required by tax and accounting law (typically up to 10 years).
- Brokerage connection data: until you disconnect; holdings snapshots are then deleted. Private portfolio value history is kept for up to 9 days on a rolling basis.
- Floor posts: until you delete them, ask us to, or close your account.
- Contact messages: up to 24 months after the conversation ends.
08Cookies and local storage
STX+ does not use advertising or cross-site tracking cookies. We use strictly necessary storage in your browser to keep you signed in (Supabase session), remember your cart, theme and interface preferences, and remember which notifications you have seen. Payment pages provided by Stripe may set their own cookies for fraud prevention. You can clear this storage in your browser settings, but parts of the Service may stop working.
09Your rights
Depending on where you live, including under the EU and UK GDPR, you have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate data;
- delete your data ("right to be forgotten");
- restrict or object to certain processing, including processing based on legitimate interests and direct marketing;
- data portability; and
- withdraw consent at any time (for example by disconnecting your broker or switching off sharing), without affecting processing already carried out.
To exercise these rights, email support@stxplus.com. We will respond within one month. You also have the right to complain to your local data protection authority (for example, in Greece, the Hellenic Data Protection Authority at dpa.gr), though we would appreciate the chance to resolve your concern first.
10Security
We use industry-standard safeguards, including encrypted connections (HTTPS/TLS), hashed passwords, row-level database access controls, server-only storage for brokerage credentials, and read-only broker access. No system is perfectly secure, so please use a strong, unique password and tell us promptly if you suspect a problem.
11Children
The Service is only for adults aged 18 or over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
12Changes to this policy
We may update this policy as the Service changes. We will post the new version here with an updated date and notify you of material changes by email or in the Service.
13Contact
Privacy questions or requests: support@stxplus.com, or use our contact page.
[LEGAL ENTITY NAME] · [REGISTERED BUSINESS ADDRESS]