Privacy Policy

This Privacy Policy explains what information COTVault ("we", "us", "our") collects, how we use it, and the choices you have. By using COTVault you agree to this Policy.

1. Information we collect

• Account information — your name and email address, and a securely hashed (never plain-text) password.
• Payment information — handled entirely by our payment processor, Stripe. We do not see or store your full card number. We retain a Stripe customer/subscription reference and your plan status.
• Waitlist information — if you join the waitlist, your name and email.
• Usage & technical data — session cookies to keep you logged in, and basic server logs (e.g. IP address, request paths, timestamps) used for security and reliability.

2. How we use your information

• To create and operate your account and deliver the Service;
• To process subscriptions and payments through Stripe;
• To send essential account and service communications (e.g. password resets, billing notices);
• To maintain security, prevent abuse, and improve the Service.

We do not sell your personal information.

3. Cookies

We use strictly necessary cookies to maintain your login session. We do not use third-party advertising or cross-site tracking cookies.

4. Service providers we share data with

We share limited data with trusted providers only as needed to run the Service:

• Stripe — payment processing;
• Supabase — database and account storage;
• Email delivery — to send account and password-reset emails;
• AI & voice providers — the plain-English "AI read" and text-to-speech features process panel data (not your personal identity) to generate narratives and audio.

Market/positioning data itself comes from the CFTC's public reports and does not contain your personal information.

5. Data retention

We keep account information for as long as your account is active and as needed to comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we remove your personal account data within a reasonable period, except records we are required to retain (e.g. payment records).

6. Security

Passwords are stored using industry-standard salted hashing. We use encrypted connections (HTTPS) and reputable infrastructure providers. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data.

7. Your rights

Subject to applicable law, you may request to access, correct, export, or delete your personal information. To make a request, contact support@cotvault.com. You can also cancel your subscription and stop using the Service at any time.

8. Children

COTVault is not intended for anyone under 18, and we do not knowingly collect information from children.

9. International users

COTVault may be operated from, and data processed in, jurisdictions that differ from your own. By using the Service you consent to such processing consistent with this Policy.

10. Changes

We may update this Policy. Material changes will be reflected by an updated "Last updated" date. Continued use after changes constitutes acceptance.

11. Contact

Privacy questions or requests: support@cotvault.com.