Privacy Policy

Backtest Labs LLC ("Backtest Labs," "we," "our," or "us") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights as a user of our services.

1. Information We Collect

We only collect the minimum information needed to provide our services:

• Email Address – collected during sign-up and stored securely in our authentication system.
• Login Credentials – passwords are never stored in plain text and are hashed.
• Cookies – used for authentication (to keep you logged in) and analytics.
• Anonymous Analytics Data – collected through Google Analytics to understand general site usage (such as page visits and feature use). This data is not tied to your personal identity.

2. How We Use Information

We use the information we collect to:

• Create and manage your account.
• Provide customer support when you contact us.
• Deliver transactional emails (such as password resets and account notifications).
• Improve our site through anonymous analytics.

We do not send marketing or promotional emails.

3. Cookies & Tracking

We use cookies and similar technologies for:

• Authentication – to keep you signed in securely.
• Analytics – to track site usage patterns in an anonymous way.

These cookies do not collect personally identifiable information.

4. How We Share Information

We do not sell or rent your personal information. We only share data with third-party providers that help us operate our services:

• Supabase – authentication and secure storage of account information.
• Stripe – payment processing (we never see or store your credit card details).
• Google Analytics – anonymous site usage tracking.
• Cloudflare Pages – website hosting.
• Resend – delivery of transactional emails.

These providers only have access to the information necessary to perform their services.

5. Data Storage & Security

• All information is transmitted securely using TLS encryption.
• Passwords are hashed and managed by Supabase.
• Access to user information is restricted to authorized processes only.
• Row-Level Security (RLS) is enabled in Supabase to ensure you can only access your own data.

6. Data Retention & Deletion

• When you request account deletion, your account enters a 30-day grace period. If you have an active paid subscription, the grace period begins after your current billing cycle ends. During this time, your account remains accessible on the Free tier and you may restore it at any time.
• After the 30-day grace period, all associated data (including your email, saved strategies, backtest results, and personal records) is permanently removed from our production systems.
• Automated database backups maintained by our infrastructure provider may contain your data for up to 7 days after permanent deletion before being purged through normal backup rotation.

7. Your Rights

As a user, you have the right to:

• Request deletion of your account and associated data at any time, subject to a 30-day grace period.
• Contact us with questions about your data.

8. GDPR Rights (For EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data.
• Right to rectification (correct inaccurate data).
• Right to erasure (delete your data).
• Right to data portability (export your data).
• Right to object to processing.

To exercise any of these rights, please contact us using the information provided in the Contact Us section below.

9. CCPA Rights (For California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected.
• Right to delete personal information.
• Right to opt-out of sale of personal information (note: we do not sell your data).
• Right to non-discrimination for exercising your rights.

To exercise any of these rights, please contact us using the information provided in the Contact Us section below.

10. Children's Privacy

Backtest Labs is not directed to children under 13. We do not knowingly collect information from children under 13, and accounts may not be created by anyone below this age.

11. Business Transfers

If Backtest Labs is ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. In such cases, this Privacy Policy will continue to apply to your data unless otherwise notified.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top of this page. Continued use of our services after changes are posted means you accept those changes.

13. Legal Jurisdiction

This Privacy Policy is governed by the laws of the State of North Carolina, United States.

14. Contact Us

For questions about this Privacy Policy or your data, email us at:

legal@backtestlabs.com