This explains what we collect, why, and what you can ask us to do about it. It is written to comply with the Personal Data (Privacy) Ordinance of Hong Kong.
What we collect
When you apply — your name, email address, and whatever you tell us about your trading. We use it to decide whether the membership suits you, and to reply.
When you subscribe — your email address, a payment reference, and a record of what you have paid.
When you run the software — an identifier for your computer, your brokerage account value, the positions you hold, and diagnostic information such as your software version and whether your broker connection is working.
We never receive your brokerage credentials. They stay on your computer. We cannot log into your account.
Why we collect it
- To size positions correctly, which requires knowing your account value
- To manage your open positions, which requires knowing what you hold
- To tell you when something is wrong before you notice it yourself
- To keep your membership working and to take payment
- To answer you when you ask for help
We do not sell your data, we do not share it with advertisers, and we do not use it to build a profile of you for any purpose other than running the service.
Who else sees it
- Our servers, hosted in the United States
- Our email provider, to send sign-in codes and notices
- Discord, if you join the members' server, under their own terms
We will disclose data if we are legally required to, and we will tell you if we are permitted to.
How long we keep it
Account and trading data for as long as you are a member, and for twelve months afterwards in case you return. Payment records for seven years, as Hong Kong tax law requires. Application emails for twelve months.
What you can ask us to do
- Tell you what we hold about you
- Correct anything that is wrong
- Delete your data, subject to the retention periods above
- Stop sending you anything that is not essential to the service
Email privacy@caffenatd.com and we will respond within thirty days.
Security
Traffic between your computer and our servers is encrypted. Sign-in uses a one-time code rather than a password. Our databases are backed up daily and access is restricted.
No system is perfectly secure. If a breach affects you, we will tell you.
Cookies
This website sets no tracking cookies and runs no analytics that identify you. The software stores a sign-in token on your own computer so you do not have to sign in every day.
Changes
If we change this policy materially we will email members before it takes effect.