Privacy policy
Last updated August 1, 2026
What we collect
We collect account identifiers, profile settings, subscription status, saved watchlists, alerts, journal entries, analysis results, and service diagnostics needed to operate XaiChart. Payment details are processed by Stripe for web purchases, Google Play for Android purchases, or Apple for App Store purchases and are not stored by XaiChart.
Chart images
Chart screenshots are sent over encrypted connections to the XaiChart server and the configured AI analysis provider. XaiChart processes the image in memory and does not retain the screenshot after analysis. When history saving is enabled, the structured result and captured market candles (for a market analysis) are saved to your private history. Turning history saving off applies to future results; it does not delete existing history.
Service providers
XaiChart uses Supabase for authentication and account data, OpenAI for chart-image analysis, Twelve Data for confirmed market candles, TradingView for attributed display-only charts, news, and economic-calendar widgets, Forex Factory for source-attributed current-week economic events, official central-bank feeds for public macro headlines, and The GDELT Project as a fallback headline-discovery source. X supplies verified-source public posts when configured. Stripe handles web billing; Google Play, Apple, and RevenueCat handle mobile billing and entitlement synchronization; DigitalOcean provides hosting. Each provider processes the minimum information required for its role under its own terms and privacy policy.
How we use information
We use information to authenticate accounts, provide and improve chart analysis, synchronize private history and preferences, manage subscriptions, provide market context, prevent abuse, diagnose failures, and meet legal obligations. XaiChart does not sell personal information or use customer chart images for advertising.
Control and retention
You can export your account data, clear saved analyses, or permanently delete your account from Settings. Analysis usage is recorded separately from saved history to enforce account limits and prevent abuse; clearing history or switching history saving off does not reset your allowance. Account deletion removes user-owned database records through cascading deletion. Billing records and operational security logs may remain only for the period reasonably required for accounting, fraud prevention, reliability, dispute handling, or legal compliance.
International processing
Our providers may process information in Canada, the United States, or other countries where they operate. Those countries may have different data-protection laws. We use provider agreements and security controls appropriate to each service and disclose information only as described in this policy or where legally required.
Your privacy rights
Depending on where you live, you may have rights to access, correct, export, or delete personal information, withdraw consent, or object to certain processing. You may exercise available account controls in Settings or contact us. We may need to verify your account before completing a request.
Security
Private account records are protected by Supabase row-level security. Production traffic uses HTTPS, authentication tokens are handled using secure server-side session cookies, and provider secrets remain server-side.
Age requirement
XaiChart is intended for adults aged 18 and over. We do not knowingly collect personal information from children.
Operator and contact
XaiChart is operated by Winston Mafora, trading as XaiChart, at 1320 – 730 58 Avenue SW, Calgary, Alberta T2V 4Z5, Canada. Privacy, account-deletion, and data requests can be sent to [email protected].