Privacy Policy

ZigZagX ("we", "us", or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what we collect, how we use it, and the choices you have about your data when you use the ZigZagX website and services (the "Service").

By using the Service, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use the Service.

We collect the following categories of information:

• Account information: name, email address, and (optionally) mobile phone number that you provide when accepting an invite or updating your profile.
• Authentication data: hashed passwords, login timestamps, IP address, and user-agent string of each successful login. Passwords themselves are never stored in plaintext.
• Trading journal content: trades, phase entries, notes, price/share values, timeframes, setup criteria, confidence ratings, and screenshots you upload.
• Preferences: notification method (email, SMS, both, none), event opt-ins, default trade size, and other UI settings.
• Automatically collected data: cookies and similar technologies used to keep you signed in and to remember non-sensitive UI preferences.
• Communications: any messages, feedback, or support requests you send us.

We use your information to:

• Provide, operate, and improve the Service.
• Authenticate you and secure your account, including detecting suspicious activity.
• Deliver transactional emails via Resend (invitations, password resets, trade notifications) and, if you opt in, SMS via Twilio.
• Fetch live market data (quotes, insider transactions, fundamentals) from third-party market data providers such as Yahoo Finance.
• Store screenshots you upload in Emergent Object Storage so they are accessible when you view your trades.
• Generate AI-assisted trade context (e.g. market history summaries) using large language models. Only the ticker and public market events are sent — never your notes or personal data.
• Comply with legal obligations and enforce our Terms of Service.

We rely on a small set of vetted third-party providers to operate the Service. These providers process data on our behalf under their own privacy and security terms:

• Resend — transactional email delivery (invitations, notifications).
• Twilio — SMS delivery for users who opt in to text notifications.
• MongoDB / Emergent — hosted database and file object storage.
• Yahoo Finance (yfinance) — public market data (ticker quotes, insider filings, fundamentals). We send only ticker symbols, never personal data.
• Emergent LLM Gateway — AI-generated market history summaries. We send only the ticker and public price context.

We do not sell, rent, or trade your personal information to advertisers or data brokers.

ZigZagX uses browser cookies and localStorage to keep you signed in (via a JWT access token) and to remember UI preferences such as the last-selected timeframe on the Insider Summary widget. These are technical cookies required for the Service to function; we do not use advertising or third-party tracking cookies. Most browsers let you block or delete cookies through their settings, but doing so may sign you out or disable certain features.

We retain your account and journal data for as long as your account is active. Login events are retained for security auditing. Screenshots you upload remain in object storage until you delete the associated trade or phase. If you request account deletion, we will remove your personal information and journal content within a reasonable period, except where retention is required by law.

We take reasonable technical and organizational measures to protect your information, including bcrypt password hashing, JWT authentication with short-lived tokens, HTTPS-only transport, and strict server-side role-based access controls. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

You can:

• Update your name, email, phone number, and password at any time from Settings → Account.
• Change or turn off notifications at any time from Settings → Trade Notifications.
• Request a copy or deletion of your data by emailing us — see Contact below.
• Withdraw consent to receive text alerts by switching your notification method to Email or Off.

Depending on where you live (for example, California residents under the CCPA or EU/UK residents under the GDPR), you may have additional rights such as access, correction, portability, and erasure. Contact us to exercise these rights.

If you opt in to text-message notifications, ZigZagX will use your mobile phone number solely to send you automated trade alerts related to trades and ideas you have chosen to follow inside the platform.

We do not share your mobile phone number with third parties for their marketing purposes. We do not sell, rent, lease, or otherwise disclose mobile phone numbers or SMS consent information to any third party for promotional or advertising use. Numbers are transmitted only to our SMS delivery provider (Twilio) strictly for the purpose of delivering the alerts you requested, and no mobile opt-in data or consent records are shared with anyone else.

Message Frequency: The number of text messages you receive is variable and depends entirely on how many trades you have chosen to follow inside the ZigZagX site. Active users who follow many trades may receive multiple messages per day; users who follow few or no trades may receive very few or no messages.

Message and Data Rates: Message and data rates may apply depending on your mobile phone service plan. ZigZagX is not responsible for any carrier fees you may incur from receiving these messages.

Help & Stop: You may stop text notifications at any time from Settings → Trade Notifications inside the ZigZagX web platform. For help with text notifications, email us at admin@zigzagx.com.

ZigZagX is not directed to children under 13, and we do not knowingly collect personal information from children. If we learn we have collected data from a child under 13, we will delete it promptly. Parents or guardians who believe a child has provided us information can contact us to have it removed.

ZigZagX is operated from the United States. If you access the Service from outside the U.S., you acknowledge that your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your country.

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons. When we make material changes, we will update the "Updated" date at the top of this page and, if appropriate, notify you through the Service or by email. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

Questions or requests about your data? We're happy to help.

Via Email: admin@zigzagx.com