PRIVACY POLICY

Last Updated: September 29, 2025

This Privacy Policy ("Policy") describes how MyTradeBud ("Company," "we," "us," or "our") collects, uses, discloses, and safeguards personal information in connection with our website, beta testing program, browser extension, and related services (collectively, the "Services"). This Policy is incorporated into and forms part of our Terms of Service.

1. INFORMATION WE COLLECT

1.1 Information You Provide

At this stage, we collect only:

• Email Address: Provided voluntarily when signing up for beta participation, updates, or communications about our product
• Confirmation of Age: Your representation that you are 18 years of age or older
• Consent Records: Documentation of your consent to this Policy and our Terms of Service

1.2 Technical Information

When you visit our website, we may automatically collect:

• IP address and geographic location (country/region level)
• Browser type and version
• Date and time of access
• Referring website information

1.3 Browser Extension Permissions

Our browser extension, when installed, may require access to:

• Active tab content on TradingView.com only
• Local storage for user preferences
• No browsing history, passwords, or personal data from other websites is accessed or collected

2. HOW WE USE INFORMATION

We use collected information exclusively for:

• Communicating regarding beta testing program participation
• Sending critical updates, announcements, or security notices about our Services
• Requesting feedback for product development and improvement
• Complying with legal obligations and protecting our legal rights
• Detecting and preventing fraud or security issues

3. LEGAL BASIS FOR PROCESSING

We process personal information based on:

• Consent: Your explicit consent for beta program participation
• Legitimate Interests: For security, fraud prevention, and service improvement
• Legal Compliance: When required by applicable laws or regulations

4. DATA SHARING AND DISCLOSURE

We do not sell, rent, or trade personal information. We may share information only:

4.1 With Service Providers

• Email service providers (bound by confidentiality agreements)
• Cloud hosting providers (with appropriate data processing agreements)
• Analytics providers (in aggregated, non-identifiable form only)

4.2 For Legal Reasons

• To comply with applicable laws, regulations, or legal processes
• To protect rights, property, or safety of the Company, users, or others
• To detect, prevent, or address fraud, security, or technical issues

4.3 Business Transfers

• In connection with merger, acquisition, or sale of assets (with notice to affected users)

5. DATA RETENTION

• Email Addresses: Retained until you unsubscribe, request deletion, or beta program concludes plus 30 days
• Consent Records: Retained for 3 years from collection or as required by law
• Technical Logs: Retained for maximum 90 days unless required for security investigation

6. DATA SECURITY

6.1 Security Measures

We implement:

• Encryption in transit (TLS/SSL) and at rest
• Access controls and authentication requirements
• Regular security assessments
• Secure data destruction procedures

6.2 Data Breach Notification

In the event of a data breach affecting your personal information:

• We will notify affected users within 72 hours of discovery
• We will provide information about the breach and recommended protective actions
• We will notify relevant regulatory authorities as required by law

6.3 Security Limitations

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in:

• Canada (primary processing location)
• Other countries where our service providers operate

By using our Services, you consent to such transfers. We ensure appropriate safeguards through contractual obligations with service providers.

8. YOUR RIGHTS AND CHOICES

8.1 Access and Control Rights

Subject to applicable law (including PIPEDA, GDPR, CCPA), you may:

• Access personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Withdraw consent to processing
• Request data portability
• Object to certain processing activities

8.2 Exercising Your Rights

To exercise rights, contact us with:

• Proof of identity (we may request verification)
• Specific description of requested action
• We will respond within 30 days of verified request

8.3 Unsubscribe Options

• Click "unsubscribe" link in any promotional email
• Email us directly at hello@mytradebud.com
• All marketing communications include opt-out mechanisms

9. COOKIES AND TRACKING

9.1 Essential Cookies Only

We use only essential cookies necessary for:

• Security and authentication
• User preference storage
• Basic functionality

9.2 No Third-Party Tracking

We do not use:

• Third-party advertising cookies
• Cross-site tracking technologies
• Behavioral advertising mechanisms

10. CHILDREN'S PRIVACY

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect information from minors. If we discover inadvertent collection from a minor:

• We will promptly delete such information
• We will terminate any associated account
• Parents/guardians may contact us to request removal

11. CANADIAN ANTI-SPAM LEGISLATION (CASL) COMPLIANCE

11.1 Consent Requirements

By providing your email address, you expressly consent to receive electronic messages about:

• Beta program updates and announcements
• Service-related notifications
• Product development communications

11.2 Commercial Electronic Messages

All commercial messages will include:

• Clear identification of sender
• Valid physical mailing address
• Unsubscribe mechanism (processed within 10 business days)

12. PRIVACY RIGHTS BY JURISDICTION

12.1 Canadian Residents (PIPEDA)

You have rights to:

• Access personal information with written request
• Challenge accuracy and completeness
• File complaints with Privacy Commissioner of Canada

12.2 European Union Residents (GDPR)

Additional rights include:

• Right to restriction of processing
• Right to lodge complaint with supervisory authority
• Right to object to automated decision-making

12.3 California Residents (CCPA/CPRA)

Additional rights include:

• Right to know categories of information collected
• Right to non-discrimination for exercising privacy rights
• Right to opt-out of sale (we do not sell personal information)

13. THIRD-PARTY PLATFORMS

13.2 Platform Compliance

Users must comply with third-party platform terms when using our Services in conjunction with such platforms.

14. UPDATES TO THIS POLICY

14.1 Notification of Changes

Material changes will be communicated via:

• Email notification (at least 30 days before effectiveness)
• Prominent website notice
• In-app notification for browser extension users

14.2 Continued Use

Continued use after notice period constitutes acceptance of updated Policy.