Privacy Policy

Last updated: March 6, 2026

1. Information We Collect

1.1 Account Information

When you create an account through our authentication provider (Clerk), we collect:

• Email address
• Name (first and last)
• Profile picture (if provided via social login)
• Authentication identifiers

1.2 Usage Data

We automatically collect certain information when you use Chartly:

• Chart preferences (symbols, timeframes, chart types)
• Watchlists and alert configurations
• Indicator settings
• Feature usage patterns

1.3 Payment Information

When you subscribe to a paid plan, payment processing is handled entirely by Stripe, Inc. We do not store your credit card number, bank account details, or other financial information on our servers. We receive from Stripe:

• Subscription status and plan type
• Customer ID (for managing your subscription)
• Payment confirmation and billing history

1.4 Technical Data

• IP address
• Browser type and version
• Device type and operating system
• Referring URLs and pages visited
• Cloudflare analytics data

2. How We Use Your Information

We use your information to:

• Provide the Service — Deliver real-time charting, sync your preferences, watchlists, and alerts across devices
• Process Payments — Manage subscriptions, billing, and upgrades through Stripe
• Improve the Platform — Analyze usage patterns to enhance features and performance
• Communicate — Send service-related emails (account confirmation, billing receipts, critical updates)
• Security — Detect and prevent fraud, abuse, and unauthorized access

3. Data Storage & Security

Your data is stored on:

• Cloudflare D1 — User accounts, preferences, watchlists, and alerts (encrypted at rest)
• Clerk — Authentication data (SOC 2 Type II compliant)
• Stripe — Payment and subscription data (PCI DSS Level 1 certified)

We implement industry-standard security measures including HTTPS/TLS encryption, JWT-based authentication, and role-based access controls. However, no method of electronic transmission or storage is 100% secure.

4. Data Sharing & Third Parties

We do not sell your personal information. We share data only with:

• Clerk — Authentication services
• Stripe — Payment processing
• Cloudflare — Hosting, CDN, and security services
• Yahoo Finance — Market data requests (no personal data is sent; only stock symbol queries)

We may also disclose information if required by law, regulation, or legal process.

5. Cookies & Local Storage

Chartly uses:

• Clerk session cookies — To maintain your authentication state
• Browser localStorage — To cache chart preferences, watchlists, and settings for offline access and performance
• Cloudflare cookies — For security and performance optimization

We do not use third-party advertising or tracking cookies.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data
• Export your watchlists and preferences
• Cancel your subscription at any time through Stripe's customer portal

To exercise these rights, contact us at privacy@thatwhy.me.

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

• User data is permanently deleted within 30 days
• Payment records are retained as required by tax and legal obligations
• Anonymized analytics may be retained for service improvement

8. International Data Transfers

Chartly operates on Cloudflare's global edge network. Your data may be processed in any country where Cloudflare, Clerk, or Stripe maintain facilities. By using Chartly, you consent to such transfers.

9. Children’s Privacy

Chartly is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us at privacy@thatwhy.me.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on chartly.me or by email. Your continued use of Chartly after changes are posted constitutes acceptance of the updated policy.

11. Contact Us