Draft — legal review required before launch.
Note 1
Draft requiring legal-entity approval and legal review before launch. Accounts collect email, name, a hashed password, sessions and preferences. Service secrets are never sent to the browser.
Note 2
Calculators and backtest files run in the browser. Chart images and AI conversations are not stored in our database; the requested service sends them to its AI provider, whose retention policy applies. Private journals require explicit sharing consent.
Note 3
Server usage records store request counters/times, not conversation text. Journal export and workspace deletion are account-scoped. Account deletion and legal retention need an approved policy.
Note 4
Session cookies are necessary for login. Theme is stored locally. External charts load only on user request. Marketing analytics and bulk messaging are not automatically enabled.