ChartNox
Legal

Privacy Policy

Effective date: September 29, 2026

1. Introduction

This Privacy Policy ("Policy") explains how ChartNox, trading as ChartNox ("ChartNox," "we," "us," or "our"), collects, uses, discloses, and protects personal data when you access or use our website, applications, and related services (collectively, the "Service") at www.chartnox.com.

By creating an account, signing in, subscribing, or otherwise using the Service, you acknowledge that you have read and understood this Policy and agree to our data practices as described here, including our use of cookies and similar technologies. Account creation constitutes your acceptance of this Policy and our Terms of Service. If you do not agree, do not use the Service.

This Policy is designed to align with widely recognized privacy principles and applicable data-protection laws, including where relevant the Israeli Protection of Privacy Law, 5741-1981, the EU/UK General Data Protection Regulation (GDPR), the UK Data Protection Act, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and similar laws in other jurisdictions. Certain rights and obligations may vary depending on where you live.

2. Data Controller

For purposes of applicable data-protection law, ChartNox (trading as ChartNox), operator of www.chartnox.com, is the controller of personal data processed through the Service (except payment card data and related checkout data processed by Paddle as Merchant of Record under Paddle's own privacy notice). Questions or requests relating to this Policy may be sent to [email protected] or via our contact form.

3. Information We Collect

3.1 Information you provide

  • Account data: name, email address, password (stored in hashed form), and profile preferences.
  • Authentication data: if you use Google or other sign-in providers, we receive information permitted by that provider (such as name, email, and profile image).
  • User content: chart screenshots and images you upload for AI analysis, messages you send to ChartNox AI, support messages, and related inputs.
  • Billing data: subscription tier, billing cycle, transaction references, and payment status. Payment card numbers are processed by Paddle; we do not store full card numbers.
  • Communications: emails or messages you send to support, feedback, or verification requests.
  • Optional profile data: phone number (if provided), country, timezone, notification preferences, and similar settings.

3.2 Information collected automatically

  • Usage data: pages viewed, features used, analysis counts, tutor usage, timestamps, and interaction logs.
  • Device and technical data: IP address, browser type, operating system, device identifiers, language, and referral URLs.
  • Cookies and similar technologies: session cookies, authentication tokens, preference storage, and security-related identifiers (see Section 8).
  • Local storage: analysis history, tutor chat sessions, theme preferences, and similar data may be stored in your browser unless you clear it.

3.3 Information from third parties

  • Payment processors: Paddle.com is the Merchant of Record for paid plans. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. Paddle collects and processes payment details (including card data) under its own privacy policy (paddle.com/legal/privacy). We receive subscription status, customer and transaction IDs, and billing emails — not full card numbers.
  • Authentication providers may provide account verification data.
  • We may receive market or news data from third-party APIs to display charts and headlines; that data is generally not personal data about you.

4. How We Use Personal Data

We use personal data to:

  • Provide, operate, maintain, and improve the Service (chart analysis, AI tutor, pattern library, live charts, news, history, and account features).
  • Authenticate users, secure accounts, prevent fraud and abuse, and enforce our Terms.
  • Process subscriptions, payments, renewals, refunds (where applicable), and billing communications.
  • Send service-related messages (security alerts, billing notices, product updates) and respond to support requests.
  • If you use our Discord or Telegram bot, process the chart image or ticker you send, and the server or chat ID, to run the analysis and apply the daily limit for that group. If you arrive through a partner link, we store the partner code on your account so the partner can be credited.
  • If you join our affiliate program, store where you say you will share your link and the PayPal email you give us, and count the visitors, sign-ups and payments that come through your link, so we can show your results and pay you.
  • If you opt in (at sign-up or in Settings), send an occasional email such as a weekly market recap. You can unsubscribe in any email or in Settings at any time.
  • Cache or process uploaded chart images to generate analysis results and improve reliability.
  • Comply with legal obligations, respond to lawful requests, and protect our rights.
  • Generate aggregated or de-identified analytics to understand usage and improve performance.

Legal bases (where GDPR/UK GDPR applies)

  • Contract: to provide the Service you request, including account management and paid features.
  • Legitimate interests: security, fraud prevention, service improvement, and limited analytics, balanced against your rights.
  • Consent: where required for optional marketing or non-essential cookies; you may withdraw consent at any time where applicable.
  • Legal obligation: tax, accounting, regulatory, and law-enforcement requirements.

5. AI Processing

Chart images and related prompts are transmitted to third-party AI model providers (such as OpenAI) via commercial API infrastructure to generate educational readouts and tutor responses. We use API configurations that restrict the AI provider from using your uploaded chart data or chat inputs to train public foundation models, subject to the provider's then-current enterprise/API terms.

AI outputs are fully automated and may contain errors, omissions, or algorithmic hallucinations; they are not reviewed by humans before delivery unless you explicitly flag a response to support. Do not upload content you are not authorized to share or that contains sensitive personal data unrelated to financial chart analysis.

To manage fair use and infrastructure costs, ChartNox AI applies structural usage limits that depend on your active plan tier. As of the effective date of this policy: Free does not include ChartNox AI chat; Basic includes up to 20 messages per UTC calendar month; and Pro includes up to 40 messages per UTC day (with analysis history available in chat). Guests cannot use chat. Limits may be adjusted over time; your account UI will display remaining allowances when relevant.

6. How We Share Personal Data

We do not sell your personal data. We share data only as needed to operate the Service, including with:

  • Infrastructure and hosting providers (e.g., cloud hosting, databases such as MongoDB).
  • AI and technology providers (e.g., OpenAI API for automated analysis and tutoring).
  • Payment processors (Paddle.com as Merchant of Record).
  • Authentication providers (e.g., Google OAuth via NextAuth).
  • Chart and market data providers (e.g., TradingView embedded widgets and third-party data APIs).
  • Email and communications providers for verification, support, and notifications.
  • Professional advisers and authorities when required by law or to protect rights, safety, and security.

These providers process data under confidentiality, security, and data-processing obligations appropriate to their role. We are not responsible for the independent privacy practices of third-party websites, apps, or services you access through or alongside the Service.

7. International Data Transfers

Personal data may be processed in your country and in other countries where we or our providers operate, including Israel, the United States, the European Union, the United Kingdom, and other regions. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses, vendor assessments, and contractual protections.

8. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to:

  • Keep you signed in and maintain session security.
  • Remember preferences (such as theme and settings).
  • Protect against abuse and unauthorized access.
  • Measure performance and reliability of the Service.
  • Understand which links bring visitors (for example a short-lived cookie that remembers a campaign or partner code, and privacy-friendly, cookieless page-view analytics).

By creating an account, signing in, or continuing to use the Service, you agree to our use of cookies and similar technologies as described in this Policy, except where your local law requires separate consent for non-essential cookies—in which case we will honor applicable requirements. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service from working.

9. Data Retention

  • Account data is retained while your account is active and for a reasonable period afterward for legal, security, and dispute-resolution purposes.
  • Uploaded chart content may be cached on our servers (e.g., by content hash) to improve performance; you may delete entries from Analysis History in the app where available.
  • Browser-stored history remains on your device until you clear it.
  • Billing records are kept as required for tax, accounting, and payment disputes (including records held by Paddle).
  • Support messages are retained as needed to resolve inquiries and improve support.

10. Security

We implement technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and hashed passwords. No method of transmission or storage is completely secure. You are responsible for safeguarding your credentials. Report suspected security issues to [email protected].

11. Your Privacy Rights

Depending on your location, you may have the right to:

  • Access personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of personal data, subject to legal exceptions.
  • Restrict or object to certain processing.
  • Request data portability where technically feasible.
  • Withdraw consent where processing is based on consent.
  • Opt out of sale or sharing of personal information (we do not sell personal data).
  • Not be subject to solely automated decisions with legal or similarly significant effects (we do not provide regulated automated decision-making; AI chart readouts are educational tools only).

To exercise rights, email [email protected] with sufficient information to verify your identity. We respond within timeframes required by applicable law. You may also lodge a complaint with your local data-protection authority. California residents may designate an authorized agent where permitted by law.

Account deletion is available in Settings. Deleting your account does not automatically delete all backups or records we must retain by law, or payment records retained by Paddle.

12. Children

The Service is not directed to anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided data, contact us and we will take appropriate steps to delete it.

13. Third-Party Links and Services

The Service may link to or embed third-party content (including TradingView chart widgets, Paddle checkout, news sources, and third-party APIs). Those independent third parties govern your interactions via their own privacy policies. We are not responsible for their legal practices, data processing, service availability, accuracy, or security frameworks.

14. Changes to This Policy

We may update this Policy to reflect legal, technical, or business changes. We will post the updated Policy on this page and revise the effective date. Material changes may be communicated by email or in-app notice where required. Continued use after the effective date constitutes acceptance of the updated Policy, except where prohibited by law.

15. Refund Policy

The full refund, trial, and cancellation terms are on our dedicated Refund Policy page. In short: paid plans include a 3-day free trial (payment method required); cancel during the trial and you are not charged; after the first paid charge you have a 30-day money-back guarantee on that first charge, subject to the conditions on the refund page. Paddle, as Merchant of Record, handles returns. Mandatory consumer rights are not limited.

16. Educational Disclaimer

ChartNox provides educational and informational tools only. AI readouts, pattern visualizations, news summaries, and market views do not constitute financial, investment, tax, or legal advice. Trading involves substantial risk of capital loss. You are solely responsible for your individual decisions. See our Terms of Service for full disclaimers and limitation of liability.

17. Contact

Privacy questions or rights requests: [email protected] or Contact support. Billing / refunds for paid orders: Paddle (paddle.net) and [email protected].