Privacy Policy

1. Introduction

Trade-Verse ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Trade-Verse platform ("the Platform").

By creating an account and using Trade-Verse, you consent to the data practices described in this policy. We encourage you to read this document carefully and contact us if you have any questions about how your data is handled.

2. Information We Collect

We collect information that you provide directly to us, as well as information that is generated automatically when you use the Platform.

Information you provide:

• Account information: Your email address, unique handle (username), and display name provided during registration.
• Profile information: Optional details you add to your profile, including your bio, avatar image, and any other information you choose to share.
• User-generated content: Forum posts, comments, and other content you create on the Platform. Direct messages are encrypted at rest using industry-standard encryption and are stored only in encrypted form.

Information collected automatically:

• IP address: Collected during registration and login for security and abuse prevention purposes.
• Browser and device information: Browser type, operating system, and device identifiers, collected to ensure compatibility and security.
• Session data: Information about your active sessions, including login timestamps and session identifiers, used to manage authentication.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Account management: To create, authenticate, and maintain your account. Your email is used for verification, password resets, and essential account notifications.
• Platform security: To detect and prevent fraud, abuse, spam, and unauthorized access. IP addresses and session data help us identify suspicious activity and protect all users.
• Platform improvement: To understand how users interact with the Platform, identify bugs, and improve features and performance. We use aggregated, non-identifying data for this purpose.
• Communication: To send you essential service notifications, including account verification, security alerts, and updates to our Terms of Service or Privacy Policy. All platform emails are sent from [email protected]. We do not send marketing emails without your explicit consent.

4. Data Storage & Security

We take the security of your data seriously and employ industry-standard measures to protect it against unauthorized access, alteration, disclosure, or destruction.

• Passwords: All user passwords are securely hashed using industry-standard algorithms. We never store passwords in plain text and cannot retrieve your original password.
• Session management: User sessions are managed server-side with secure, HTTP-only cookies. Sessions expire after a period of inactivity and can be revoked by the user at any time.
• Infrastructure: Data is hosted on secure infrastructure with encrypted connections (TLS/SSL) for all data in transit. Access to production systems is restricted to authorized personnel only.

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents that may occur.

5. Cookies & Similar Technologies

Trade-Verse uses only essential cookies required for the Platform to function. We do not use advertising, analytics, or tracking cookies.

• Session cookie (sid): An HTTP-only, secure cookie that identifies your authenticated session. This cookie is essential for keeping you logged in and expires when your session ends or after a set period of inactivity.
• CSRF token cookie: A security cookie used to protect against cross-site request forgery attacks. This cookie ensures that requests to the Platform originate from legitimate sources.

Because we only use strictly necessary cookies, no cookie consent banner is required under most privacy regulations. We do not share cookie data with any third parties.

6. Third-Party Services

We use a limited number of third-party services to operate the Platform. These services may process certain data on our behalf:

• Bot protection: We use a third-party bot protection service during registration and login. This service may collect IP addresses and browser telemetry to distinguish between human users and automated bots. This data is processed by the service provider in accordance with their privacy policy.
• Cloud storage: User-uploaded media (such as avatar images and forum attachments) are stored on a secure cloud storage service. Files are stored securely and are only accessible through the Platform.

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes. Third-party services are used solely to operate and secure the Platform.

7. Data Retention

We retain your account data (email, handle, display name, profile information) for as long as your account remains active on the Platform. If you do not log in for an extended period, your account will remain intact but may be flagged as inactive.

When you request account deletion, we will remove your personal data from our active systems within 30 days. Some data may be retained in encrypted backups for a limited period as part of our standard backup procedures, after which it will be permanently purged.

Forum posts and community content may be retained in an anonymized form after account deletion to preserve the integrity of discussion threads. Anonymized content is stripped of all personally identifiable information and cannot be traced back to you.

8. Your Rights

You have the following rights regarding your personal data:

• Access: You can view the personal data associated with your account at any time through your profile and account settings pages on the Platform.
• Correction: You can update or correct your personal information (display name, bio, avatar) at any time through your account settings.
• Deletion: You can request the deletion of your account and associated personal data through the account settings page. Deletion requests are processed within 30 days.
• Data portability: You may request a copy of your personal data in a structured, commonly used format by contacting us at the email address listed in Section 12.

To exercise any of these rights, you can use the relevant features in your account settings or contact us directly. We will respond to all data requests within 30 days.

9. Children's Privacy

Trade-Verse is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us immediately so that we can take appropriate action.

If we become aware that we have collected personal data from a user under the age of 18, we will take steps to delete that information and terminate the associated account as promptly as possible.

10. International Data Transfers

Trade-Verse operates infrastructure that may be located in various countries. By using the Platform, you acknowledge and consent to the transfer of your personal data to servers and facilities outside of your country of residence, where data protection laws may differ from those in your jurisdiction.

We take appropriate safeguards to ensure that your personal data receives an adequate level of protection regardless of where it is processed. These safeguards include encryption of data in transit and at rest, strict access controls, and contractual obligations with third-party service providers.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable laws. When we make material changes, we will update the "Last updated" date at the top of this page and may notify you through the Platform or via email.

Your continued use of Trade-Verse after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your data.

12. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]