Privacy Policy

CrossDynamix operates JBOT Trader. This Policy explains the personal information we collect, why we use it, when we disclose it, and the choices available to you.

Information we collect

Account and profile: email address, display name, verification state, contact details, and optional billing-profile address.

Membership and payments: plan, provider, subscription status, customer and transaction identifiers, amount, currency, invoices, cancellations, and refunds. Stripe and PayPal collect payment credentials on their hosted pages; JBOT does not receive or store full card or bank details.

Product activity: watchlists, settings, simulated or journaled trades, portfolio entries, alerts, model snapshots, support messages, and actions needed to provide and improve your workspace.

Security and diagnostics: session identifiers, IP address, browser and device information, timestamps, service logs, errors, and audit events.

Product feedback

When you choose to send feedback, we store its title, message, type, product, clean page route and timestamps, together with its review status, ranking and build updates. Signed-in feedback is linked to your account; authorized administrators can see that account's email to follow up. Visitor feedback uses a random, HttpOnly functional cookie valid for 30 days and a hashed identifier to show that browser's submissions and limit abuse. This feedback feature does not collect page query strings, holdings, diagnostic logs, IP addresses or browser fingerprints. Do not include passwords, payment credentials or private financial information in your message.

Feedback is private to you and authorized administrators. You can view your submission status and published build update in My feedback; internal review notes are not public. We retain submissions as needed for support and product development under the retention and access-rights policies below. Guest feedback is not automatically linked to an account when you later sign in. Submitting feedback does not opt you into analytics, marketing, paid data usage or notifications.

Rumor Mill community posts

Rumor Mill notifications are optional. We store your selected tickers, sources, channels, frequency and quiet hours, together with delivery-state records. Enabled email and SMS alerts are sent through our existing email and messaging providers. You can disable these alerts in Rumor Mill preferences; SMS recipients may also reply STOP. In-site notifications update while the site is open.

Rumor Mill posts are anonymous to other members, not to JBOT. We retain the submitting account ID, post text, ticker, source URL, self-selected sentiment, optional position disclosure, submission time, reports and moderation actions. Public posts display a per-post alias rather than your name or account details. Do not include information that identifies you or another person. Moderators review submissions before publication; this review does not verify investment claims.

Published posts contribute to ticker-level community metrics. Each account contributes at most one current sentiment stance per ticker in a rolling 24-hour window, and a displayed sentiment score requires at least five contributors. Withdrawing or removing a post excludes it from public metrics. Withdrawal hides the post from members; retained moderation and security records remain subject to our retention policy and applicable access or deletion rights. Post text, position disclosures and ticker interests are not sent to advertising platforms by this feature.

Why we use information

We use information to create and secure accounts; verify email; provide the requested products; process, reconcile, and support subscriptions; save user settings and journals; detect misuse; troubleshoot; measure reliability and feature performance; communicate material service or billing information; comply with law; and establish or defend legal claims.

Optional membership reminders: if you explicitly opt in from your account, we use your verified email and subscription status to send up to three subscription reminders through Twilio SendGrid. These are separate from security, billing and trading-alert emails. We retain the consent choice and a send-status record to honor opt-outs and prevent duplicates. We do not track opens or clicks in these reminders. Unsubscribe from any reminder without signing in, or change your email preference. Existing accounts are not automatically enrolled.

Consent and legal grounds

We identify purposes at or before collection and seek meaningful consent where required. Some processing is necessary to perform the customer agreement, protect the service, comply with legal obligations, or pursue reasonable business interests that do not override applicable privacy rights.

Service providers and disclosure

We disclose only what is reasonably needed to providers that support hosting, market data, authentication email, payments, fraud prevention, diagnostics, and customer support. Core providers include Stripe, PayPal, Twilio SendGrid, Microsoft infrastructure, and applicable market-data vendors. We may also disclose information during a corporate transaction, with your direction, or where required or permitted by law.

We do not sell personal information. We do not use journaled trades to place orders or manage brokerage assets.

International processing

JBOT is operated from Canada and may use providers in Canada, the United States, and other jurisdictions. Information processed elsewhere may be subject to local lawful-access rules. We use contractual, access-control, and security measures appropriate to the information and service.

Retention

We retain account and workspace data while the account is active and for a reasonable period afterward. Billing, tax, security, consent, and audit records may be retained for up to seven years or longer where law or an unresolved claim requires it. We delete or de-identify information when it is no longer reasonably needed.

Security

Controls include encrypted transport, hosted payment collection, salted adaptive password hashing, limited administrative access, signed provider webhooks, short-lived cached entitlements, audit logging, backups, and service isolation. No system can eliminate all risk; report suspected compromise promptly.

Cookies

JBOT uses essential cookies to maintain an authenticated session, prevent request forgery, remember required settings, and secure paid access. Optional first-party analytics are off until you choose Allow analytics. They record product visits, broad feature categories, foreground time, generic error counts and campaign codes, but not trade contents, ticker searches, form values or error-message contents. When you are signed in, observed activity may be associated with your account for product reporting.

With the same optional analytics choice, we record fixed page categories, broad device-size categories, categorized referral sources, scroll milestones, known navigation actions and navigation timings (page load, DOM ready and time to first byte). Visitor analytics do not store full page or referrer URLs, query strings, precise screen dimensions, IP addresses or browser fingerprints. Campaign codes and sources may identify the marketing link used, but do not include sign-in tokens or form contents.

Your analytics choice is stored in your browser. With consent, a random visitor identifier and first observed campaign attribution are stored for 30 days, and a tab-session identifier renews after 30 minutes without recorded activity or ends when the tab session ends. Detailed optional events use a 90-day retention window with bounded cleanup during ingestion. Use the Privacy control on a workspace or public page to withdraw consent; this stops collection and clears these browser identifiers. Global Privacy Control and Do Not Track are honored. Server-side security, account and billing records are collected separately to operate the service. Operational request counts, HTTP status classes and response-time totals are aggregated hourly by account and product, without storing request paths, tickers or payloads, and use a 90-day retention window.

Optional Google Ads measurement

Google Ads measurement is a separate, unchecked choice within our analytics preferences. Existing consent to JBOT usage analytics does not authorize Google measurement. Only after you allow both choices do we load Google's tag to measure advertising effectiveness. We share bounded Google ad-click identifiers, a verified trial-activation event, and a first confirmed subscription-payment event with its amount, currency and a pseudonymous deduplication identifier. Google also receives the IP address, browser connection information, measurement-page address and cookies involved in that request. We do not send names, email addresses, phone numbers, account identifiers, authentication tokens, trade journals, positions or ticker searches. Enhanced conversions, personalized advertising and remarketing are not enabled by this integration.

The advertising choice lasts up to 180 days in this browser. Google attribution cookies are configured for 30 days; local conversion deduplication records expire after 90 days. Google handles information under its Privacy Policy and business privacy terms, including its own retention rules. Decline optional measurement, uncheck Google measurement in Privacy, or use Global Privacy Control or Do Not Track to stop future collection. Withdrawal removes the measurement frame and accessible advertising cookies and local deduplication records; it cannot recall events already sent to Google. Blocking cookies, not consenting, or leaving before confirmation can prevent attribution. Advertising reports are not our accounting ledger.

Your choices and access rights

You may update profile information in Account, cancel membership through Manage billing, or request access, correction, export, or deletion by contacting support@jbot-trader.com. We may verify identity before acting. Some records must be retained for billing, fraud prevention, security, or legal obligations. You may challenge our handling of personal information and contact the Office of the Privacy Commissioner of Canada or your local regulator.

Contact

Privacy questions and requests may be sent to the JBOT Privacy Lead at support@jbot-trader.com. Include "Privacy request" in the subject. We will respond within the timeframe required by applicable law.