Privacy Policy

1. Data Controller

References to "we," "us," or "our" mean WealthAI Limited.

For data protected under the Hong Kong Personal Data (Privacy) Ordinance (PDPO), GDPR, CCPA, and similar laws, we act as the data controller or equivalent.

2. Information We Collect

We collect the following categories of information:

• Account information: email address, display name, password (stored only as a hash), and identifiers from third-party login providers;
• Subscription and billing information: subscription status, billing cycle, order IDs; full card numbers and payment credentials are handled by Stripe and not stored by us;
• Communications: emails and feedback you send to our support team;
• Data generated by cookies and similar technologies (see below).

3. How We Use Information

We use your personal information only for legitimate, specified, and necessary purposes, including:

• Providing the service, processing subscriptions, maintaining login sessions, and syncing personal data such as watchlists;
• Customer support and responding to your requests and feedback;
• Security, fraud prevention, and protecting against abuse or unauthorized access;
• Improving product features, content quality, and user experience based on aggregated or anonymized analytics;
• Complying with legal, regulatory, and litigation-related obligations.

4. Legal Bases for Processing

If you are protected by GDPR or similar regimes, we rely on the following legal bases: (i) performance of our contract with you; (ii) our legitimate interests (such as security and product improvement); (iii) compliance with legal obligations; and (iv) where applicable, your explicit consent.

5. Sharing With Third Parties

We do not sell or rent your personal information. We share data only as necessary with trusted third parties in the following situations:

• Payment processing: Stripe (subscription charges, customer portal, refund handling);
• Authentication: email and, if enabled, third-party identity providers;
• Cloud infrastructure and hosting: service providers we use to run, store, and transmit the service;
• Customer support tools: to handle the tickets and emails you submit;
• Legal or regulatory requirements: in response to court orders, government requests, or to protect our or others' legitimate interests;
• Business transfers: in connection with a merger, acquisition, or asset sale, your data may be part of the transferred assets.

6. Cookies and Similar Technologies

We use cookies and similar browser-storage technologies to maintain your login session, remember your preferences, ensure security, and understand how the service is used.

We do not rely on cross-site advertising cookies. You can manage or disable cookies in your browser settings, but some features (such as staying signed in and syncing watchlists) may not work properly without them.

7. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy, including: (i) the period your account remains active; (ii) longer periods required by law or accounting rules; and (iii) periods needed to resolve potential disputes or enforce our agreements.

When you request account deletion, we will delete or anonymize your personal information within a reasonable timeframe, except for data we are legally required to retain (such as transaction records and tax documentation).

8. Data Security

We apply technical and organizational measures consistent with industry practice, including transport encryption (TLS/HTTPS), password hashing, access controls, the principle of least privilege, and log monitoring.

However, no method of internet transmission or electronic storage is 100% secure. If a security incident materially affects your data, we will notify you as required by applicable law.

9. Your Rights

To the extent permitted by applicable law, you have the following rights:

• Access: request a copy of the personal information we hold about you;
• Rectification: request correction of inaccurate or incomplete information;
• Erasure: request deletion of your personal information, subject to legal retention requirements;
• Restriction: request that we limit the processing of your information in certain circumstances;
• Portability: receive your data in a structured, commonly used, machine-readable format;
• Objection: object to processing based on our legitimate interests;
• Withdrawal of consent: where processing is based on consent, withdraw it at any time (without affecting prior lawful processing).

10. How to Exercise Your Rights

Email support@wildbull.app describing the right you wish to exercise. We may need to verify your identity before responding.

We will respond within the timeframe required by applicable law (typically within 30 days). If we decline a request, we will explain the reason and your right to lodge a complaint with the relevant data-protection authority.

11. Children's Privacy

The service is not directed to individuals under 18, and we do not knowingly collect personal information from minors.

If you believe a minor has provided us with personal information without parental consent, please contact support@wildbull.app and we will delete the relevant data promptly.

12. Third-Party Sites and Services

The service may contain links to third-party websites or services. Those third parties have their own privacy policies, and we are not responsible for their content or practices.

Please review their privacy policies before sharing personal information with them.

13. Changes to This Policy

We may update this policy from time to time. The updated version will be posted on this page with a new "Last updated" date.

Where the changes are material, we will notify you in a reasonable manner (such as by email or in-service notice). Continued use of the service after the changes take effect constitutes acceptance of the updated policy.

14. Contact

For questions about this Privacy Policy, our data handling, or to exercise your rights, contact support@wildbull.app.