Privacy policy
Last updated August 1, 2026
What we collect
We collect account identifiers, profile settings, subscription status, saved watchlists, alerts, journal entries, analysis results, and service diagnostics needed to operate XaiChart. Payment details are processed by Stripe for web purchases, Google Play for Android purchases, or Apple for App Store purchases and are not stored by XaiChart.
Chart images
Chart screenshots are sent over encrypted connections to the XaiChart server and the configured AI analysis provider. XaiChart processes the image in memory and does not retain the screenshot after analysis unless a future upload-retention feature is explicitly enabled by you. The structured analysis result may be saved to your private account history.
Service providers
XaiChart uses Supabase for authentication and account data, OpenAI for chart-image analysis, TradingView for attributed display-only charts and the economic calendar, The GDELT Project to discover open global-news metadata, X for verified-source public posts, Stripe for web billing, Google Play, Apple, and RevenueCat for mobile billing and entitlement synchronization, and DigitalOcean for hosting. Each provider processes the minimum information required for its role under its own terms and privacy policy.
How we use information
We use information to authenticate accounts, provide and improve chart analysis, synchronize private history and preferences, manage subscriptions, deliver requested alerts and market context, prevent abuse, diagnose failures, and meet legal obligations. XaiChart does not sell personal information or use customer chart images for advertising.
Control and retention
You can export your account data, clear saved analyses, or permanently delete your account from Settings. Account deletion removes user-owned database records through cascading deletion. Billing records and operational security logs may remain only for the period reasonably required for accounting, fraud prevention, reliability, dispute handling, or legal compliance.
International processing
Our providers may process information in Canada, the United States, or other countries where they operate. Those countries may have different data-protection laws. We use provider agreements and security controls appropriate to each service and disclose information only as described in this policy or where legally required.
Your privacy rights
Depending on where you live, you may have rights to access, correct, export, or delete personal information, withdraw consent, or object to certain processing. You may exercise available account controls in Settings or contact us. We may need to verify your account before completing a request.
Security
Private account records are protected by Supabase row-level security. Production traffic uses HTTPS, authentication tokens are handled using secure server-side session cookies, and provider secrets remain server-side.
Age requirement
XaiChart is intended for adults aged 18 and over. We do not knowingly collect personal information from children.
Operator and contact
XaiChart is operated by Winston Mafora, trading as XaiChart, at 1320 – 730 58 Avenue SW, Calgary, Alberta T2V 4Z5, Canada. Privacy, account-deletion, and data requests can be sent to [email protected].