Privacy Policy

Account. When you sign up with an email address, our authentication provider stores that address and a hash of your password. We never see the password itself. If you sign in with a Google Account, section 2 lists exactly what Google sends us.

What you make on the site. The strategies you build and save, the record of each backtest you run and what it returned, your watchlists and any share links you create from them, the drawings and indicator settings on your charts, the price levels and calendar events you asked to be alerted about, your notes, your community posts and comments, your credit ledger, and the dates you visited the site.

Display settings. Theme, language, and the colours you picked for rising and falling prices. If you switch push notifications on, we also store the browser subscription needed to deliver them.

We never handle real money and never ask for brokerage, bank or wallet credentials. We do not collect resident registration numbers or dates of birth, we do not receive or store card numbers, and we run no advertising or third-party analytics trackers on the site.

Signing in with Google is optional. If you choose it, Google asks for your permission first and then sends us only the sign-in scopes we requested:

• your email address and whether Google has verified it;
• basic profile information: the name and profile picture on your Google Account;
• the identifier Google uses for your account, so that the same person returning later lands in the same Vaquero account.

What we do with it. We use these fields only to create your Vaquero account, to recognise you when you return, and to show your own name and picture to you inside the service. That is the whole of it.

The nickname other members see is a separate value assigned at random when you join, and you can change it at any time on the account page.

What we do not do. We do not request Gmail, Drive, Contacts, Calendar, Photos or any other Google data. We do not sell this data, we do not use it for advertising, profiling or credit decisions, and we do not use it to train AI models. No human on our side reads it except where you ask us for support, where security requires it, or where the law requires it.

Where it is stored. The email address, name, picture URL and account identifier are stored in our authentication database (Supabase) and are transmitted over an encrypted connection.

How to disconnect. You can revoke Vaquero's access at any time under Third-party apps & services in your Google Account, and you can ask us to delete the account itself at any time (see section 7).

• To create and secure your account and to keep you signed in.
• To keep what belongs to you: saved strategies, backtest records, watchlists, chart drawings and indicator settings, notes, credit balance and display settings.
• To run the backtest you asked for, and to run the members-only areas including community posts and comments.
• To deliver the notifications you switched on, and to answer support requests you send us.
• Once paid plans open, to take payment, to keep the record of what was bought, and to handle refunds and enquiries about them.

We do not use your information for advertising, profiling, or automated decisions that affect you.

Paid plans are not open today and no payment has ever been taken, so no payment data exists at present. This section describes what happens once they open.

Card details are entered on the payment provider's own form and go to that provider, not to us. We neither receive nor store card numbers. What reaches us is the record of the purchase itself: what was bought, when, the amount, and whether it succeeded. The provider we appoint, and the exact relationship we have with it, are named here on the day paid plans open.

We use the following providers strictly to operate the service, and they process data only on our instructions: Supabase (authentication and database), Cloudflare (hosting and content delivery), Google LLC (Google Account sign-in, when you choose it), Resend (the email we send you, which means your address), and Anthropic (the AI that turns a strategy you write into a specification, which means the sentence you wrote). A payment provider joins this list on the day paid plans open. We do not sell or share your personal information with anyone else, except where the law requires it.

These providers operate servers outside Korea, so the data described above is stored and processed overseas as part of running the service.

We keep account data for as long as the account is active. When you close the account or ask us to delete it, we remove the account record and the service records tied to it from the live database, and any residual copies in routine backups fall out on the ordinary backup cycle. Deletion is permanent and cannot be undone.

Where a law requires a specific record to be kept for a set period, we keep only that record for that period and nothing more. Records of a purchase, a payment or a refund fall under that rule once paid plans open, so they remain after the account itself has gone.

You may ask to see, correct, or delete the information we hold about you, and you may withdraw consent and close your account. Email [email protected] from your account address; we reply within 30 days. Step-by-step instructions are on the Data Deletion page.

If you signed in with Google, revoking access in your Google Account stops future sign-ins but does not by itself delete the Vaquero account, so send the deletion request as well.

We use a cookie and browser local storage to keep your sign-in session and to remember display settings such as theme, language and the up/down colours. These are needed for the site to work; we set no advertising or tracking cookies. You can clear or block them in your browser settings, in which case you will be signed out and the settings return to their defaults.

Questions, requests and complaints about your personal information go to the person named below, who handles them directly.