Privacy Policy
Last updated: April 18, 2026
ChartOdds is operated by GRTNSS International LLC, 224 W 35th St, Ste 500 #671, New York, NY 10001 ("GRTNSS," "ChartOdds," "we," "us"). This Privacy Policy explains how we collect, use, share, and protect information when you use our websites, applications, and related services (the "Service").
1. Information We Collect
Account Information
Name, email address, hashed password, account settings, subscription tier, and authentication tokens.
Payment and Subscription Information
Subscription status, plan, billing history, and transaction records. Full payment-card numbers are collected and stored directly by our payment processor (Stripe); we receive tokens and limited metadata only.
Usage Information
Pages and features used, tickers searched, watchlist entries, saved preferences, chat prompts and responses, feature-level activity, and timestamps.
Device and Technical Information
IP address, approximate location inferred from IP, browser type and version, operating system, device identifiers, referring URLs, and server and application log data.
Cookies and Similar Technologies
First-party cookies and similar storage used for authentication, session management, preferences, and basic analytics.
Communications
Information you submit through support channels, AI chat, email, or forms, including any content you voluntarily share.
Marketing Attribution
UTM parameters, referrer URLs, and landing-page interactions used to understand how users find the Service.
2. Sources of Information
We collect information (a) directly from you (e.g., when you register, subscribe, or contact support), (b) automatically when you use the Service, and (c) from third-party service providers such as our payment processor, authentication provider, market-data vendors, and analytics tools.
3. How We Use Information
- Provide, operate, maintain, and improve the Service.
- Authenticate users and secure accounts.
- Process subscriptions, billing, taxes, refunds, and customer support.
- Personalize features and remember user settings.
- Generate AI responses and analyses based on your prompts.
- Measure usage, troubleshoot, debug, and prevent fraud or abuse.
- Send transactional emails (e.g., verification, billing, security alerts) and, with consent where required, product updates and marketing.
- Comply with legal obligations and enforce our Terms.
4. Legal Bases (EU / UK Users)
Where the EU or UK GDPR applies, we process personal data under the following legal bases: (a) performance of a contract (to provide the Service), (b) our legitimate interests (to secure, improve, and market the Service), (c) your consent (for optional cookies and certain marketing), and (d) compliance with legal obligations.
5. How We Share Information
We do not sell your personal information for money. We do not share personal information with third parties for cross-context behavioral advertising. We share information only in the limited circumstances below:
- Service providers (processors): hosting (Vercel), database and authentication (Supabase), payment processing (Stripe), transactional email (SendGrid), AI inference (OpenAI and Anthropic), error and performance monitoring, and similar providers, each bound by contract to use data only to operate the Service.
- Market-data vendors: used to deliver pricing, fundamentals, and news content to you; they do not receive your personal information beyond what is necessary to respond to requests.
- Legal and safety: when required by law, subpoena, court order, or to protect users, the Service, or our rights.
- Business transactions: in connection with a merger, acquisition, financing, or sale of assets, with commitments to honor this Policy.
- With your direction: when you ask us to share information with a third party.
6. AI Features and Automated Processing
Certain features use large-language-model (LLM) providers to generate responses based on your prompts and relevant context. Prompts and responses are transmitted to those providers solely to generate the response and are subject to their enterprise data-processing terms, which prohibit training their public models on our inputs and outputs. We do not use AI to make decisions that produce legal or similarly significant effects about you without human review.
7. Data Retention
We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Account data is retained while your account is active and deleted or anonymized within a reasonable period after account closure, except where a longer retention period is required by law (for example, tax, accounting, or fraud-prevention records, typically up to seven years).
8. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, access controls, audit logging, and password hashing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you as required by applicable law.
9. Cookies and Tracking
We use first-party cookies for authentication, session management, and preferences, and limited analytics cookies to measure usage. Most browsers let you block or delete cookies, though some features may not work without them. Because internet "Do Not Track" signals are not uniformly standardized, we do not currently respond to them.
10. Your Choices and Rights
Depending on where you live, you may have the right to:
- Access, correct, or request a copy of your personal information.
- Request deletion of your personal information.
- Opt out of certain processing, including the "sale" or "sharing" of personal information (we do not sell or share personal information as those terms are defined under California law).
- Limit the use of sensitive personal information.
- Object to or restrict certain processing, and withdraw consent where processing is based on consent.
- Receive your data in a portable format, and ask us to transmit it to another provider where technically feasible.
- Not be discriminated against for exercising any of these rights.
To exercise any right, email team@chartodds.com from the address associated with your account. We may need to verify your identity before acting on a request. You may also designate an authorized agent to act on your behalf, subject to verification.
If you are in the EU or UK, you have the right to lodge a complaint with your local supervisory authority. If you are in California, you have the right to file a complaint with the California Privacy Protection Agency or the state Attorney General.
11. California Privacy Notice (CCPA / CPRA)
In the last 12 months we have collected the following categories of personal information from California residents: identifiers (name, email, IP address, account ID), commercial information (subscription and transaction records), internet activity (usage and device data), inferences drawn from the foregoing, and audio/text data from communications with support or AI features. We collect this information for the business purposes described in Section 3.
We do not sell personal information for monetary consideration and do not share personal information for cross-context behavioral advertising. California residents may exercise the rights described in Section 10.
12. Marketing Communications
You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us. We may still send you transactional or account-related messages (e.g., billing, security, material changes to these Terms).
13. International Transfers
We are based in the United States, and your information may be processed in the United States and other countries where our service providers operate. Where personal data is transferred out of the EU, UK, or Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses, the UK IDTA / Addendum, or other lawful transfer mechanisms as applicable.
14. Children's Privacy
The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.
15. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will post the revised version here and update the "Last updated" date. For material changes, we will provide additional notice (for example, by email or in-product notice). Your continued use of the Service after the revised Policy becomes effective means you accept the update.
16. Contact Us
GRTNSS International LLC
Attn: Privacy
224 W 35th St, Ste 500 #671
New York, NY 10001
Email: team@chartodds.com