Privacy Policy

[PLACEHOLDER: legal entity name] ("CORE TRADING") is responsible for the personal information described here. Contact: [PLACEHOLDER: privacy requests email].

• Account: email address, optional name, and your password (stored only as a secure hash by our authentication provider).
• Purchases: what you bought, price, time, and the version of each document you accepted. Card details go directly to our payment processor; we never receive your full card number.
• Program activity: simulated trading results, account status history, payout requests and reviews, and messages with us.
• Identity verification: the provider's session reference, status and decision code. ID images, selfies and biometric data stay with the provider (see the KYC and Identity Verification Policy).
• Where you live: the country (and U.S. state) you declare, which decides whether we can serve you.
• Profile (optional): a display name, a username and a profile picture. We re-encode every picture you upload, which removes hidden data such as the location a phone camera records, and store it privately. Your friends list: who you are friends with and pending requests.
• Technical: a keyed hash of your IP address (not the address itself), the approximate country and region of your connection as reported by our hosting provider, a keyed hash of your browser's user-agent, your browser's user-agent when you accept documents, and the cookies described in our Cookie Policy. We record these when you sign up, sign in, buy, start an identity check or request a payout, to prevent fraud, enforce our Prohibited Jurisdictions Policy and comply with sanctions laws. Connection records are deleted after 365 days.
• Risk reviews: flags raised by these checks (for example the same connection or identity used on two accounts) and how our team resolved them, and records of sanctions-list screenings (the result, list and date; not your ID details).
• Contact form and waitlist: what you send us.

To provide the Services and your account; process payments; run evaluations and payouts; verify identity and prevent fraud, account sharing and sanctions violations; keep records of agreements; meet legal, tax and accounting obligations; secure our systems; and respond to you. We do not sell personal information and do not use it for targeted advertising.

• Your friends: people you accept as friends see your display name, username and profile picture. They never see your email, residence, accounts, results or payouts. Someone can send you a request only by typing your exact username.
• Service providers that operate the Services for us: hosting (Vercel), database and authentication (Supabase), payments (Stripe [PLACEHOLDER: update if the processor changes]), identity verification (Veriff), and trading-platform providers (Rithmic; Tradovate when added).
• Professional advisers, and authorities when the law requires it or to protect rights and safety.
• A buyer or successor if the business is sold or reorganized, subject to this policy.

[PLACEHOLDER: retention schedule by category, set with counsel and a CPA (e.g. tax and payout records kept for the legally required period).]

We use encryption in transit, access controls enforced in the database, audit logging and limited staff access. No system is perfectly secure. If a breach affects your personal information, we will notify you and authorities as the law requires.

You can view and update your profile in your dashboard. To request access to, correction of or deletion of your information, email [PLACEHOLDER: privacy requests email]. We may need to verify your identity, and we may keep information we are legally required to retain. Depending on where you live, you may have additional rights under state law; we will honor them as required.

The Services are for adults 18 and over. We do not knowingly collect information from children.

We will post updates here with a new version number and date, and tell you about material changes.