Privacy Policy

1. Who we are

NovaTrader provides AI-assisted trading analysis tools. We are the data controller for the information described here. For any privacy question, correction or deletion request, contact privacy@novatrader.ai.

2. The TradingView Extension

The extension adds a panel to TradingView chart pages. It does nothing until you ask it to: there is no background monitoring, no scheduled collection, and nothing is captured while you browse.

What happens when you request an analysis

When you send a message in the panel, the extension takes a screenshot and sends it, with your question, to NovaTrader for analysis. To be precise about what that screenshot contains:

The extension briefly brings the TradingView tab into focus before capturing, because a browser can only photograph the tab that is currently active.

What the extension sends to NovaTrader

• The screenshot described above.
• Your question or the preset prompt you chose.
• The TradingView page address, page title and hostname.
• The chart symbol and timeframe where the page exposes them.
• Identifiers that group messages into a conversation.
• Your session token, so we know which account the request belongs to.

What we store, and what we do not

We do not store the screenshot. It is held in memory only for as long as it takes to produce your analysis, is never written to disk on our servers, and there is no field in our database that holds an image. What we retain is the text record of the analysis:

• Your question, the symbol and the timeframe.
• The analysis we returned to you.
• Which AI model ran and how many tokens it used.
• Any error recorded for that request.
• Your usage count against your plan allowance.

The page address, page title and hostname are used while handling the request and are not written to our analysis records.

Why

To deliver the feature you asked for, to count requests against your plan, to support you when something breaks, and to keep the service secure and working. We do not use extension data for advertising, we do not sell or rent it, we do not build advertising or marketing profiles from it, and we do not use it to make automated decisions about you outside the analysis you requested.

3. Accounts and sign-in

Signing in is passwordless. You give an email address, we email a six-digit code, and entering that code signs you in. If the address has no account, one is created at that point — signing in and signing up are the same step, so there is no separate registration. We never ask the extension for a password.

We store your email address, your name if you provide one, and for each session a hashed session token, its expiry, the IP address and the browser user-agent string that created it. The token itself is stored only as a hash. Sign-in codes are stored hashed and expire after two minutes.

The extension account is separate from the NovaTrader app account. They are different systems with separate plans and separate allowances; a plan on one does not grant anything on the other.

4. Who else processes your data

OpenAI — AI analysis

The screenshot and your question are sent to OpenAI to generate the analysis. OpenAI acts as our service provider for that single purpose. This is not a sale or a sharing of your data for advertising: it is the processing required to answer the request you made. See OpenAI's privacy policy for how they handle API data.

Email delivery

Sign-in codes and account email are delivered through an email provider, which receives your address for that purpose.

Payments

Paid extension plans are settled in USDT on the TRON network. We record the invoice, the expected amount and the blockchain transaction that paid it. We never receive or hold your private keys, and we cannot move funds from your wallet. Blockchain transactions are public by nature.

Not used by the extension

The website uses Google Analytics and the Crisp support chat. The extension does not — it contacts no analytics service and no third-party endpoint of any kind. Earlier versions loaded webfonts from Google; that was removed in version 1.10.0, and the extension now makes no third-party requests at all.

5. How long we keep things

Analysis records, account records and payment records are kept for as long as your account exists, so that your history remains available to you and so we can meet accounting and security obligations. We do not currently operate an automatic deletion schedule for analysis history, and we would rather say so than publish a retention period we do not enforce.

Sign-in codes expire after two minutes. Sessions expire and can be revoked at any time by signing out, which invalidates the token on our servers, not just in your browser.

6. Your choices and your rights

• Access or correction — email us and we will provide or correct what we hold.
• Deletion — email us and we will delete your account and its associated records. There is no self-service delete button today; the request is handled by a person.
• Sign out — revokes the session on our servers immediately.
• Stop all collection — remove the extension from Chrome. Nothing is captured once it is uninstalled.

Requests go to privacy@novatrader.ai. Depending on where you live you may also have the right to complain to your data protection authority.

7. Security

Traffic between the extension, our website and our servers uses HTTPS. Session tokens and sign-in codes are stored hashed rather than in plain text, and screenshots are never written to our disks. No system is perfectly secure and we will not claim otherwise; if a breach affects you, we will tell you.

8. Children

NovaTrader is not intended for anyone under 18 and we do not knowingly collect their data.

9. Changes

If this policy changes materially we will update the date at the top and, where the change affects what we collect, tell you in the product.

10. Contact

privacy@novatrader.ai