Privacy Policy

1. Introduction

Mercury Solutions (“we,” “our,” or “us”) operates the Mercury Solutions web application (the “Platform”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. Please read this policy carefully. By accessing or using the Platform, you agree to this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Password (hashed — we never store plaintext passwords)
• Trading preferences (trading style, risk tolerance, account size)
• Watchlist symbols

2.2 Usage Data

We automatically collect certain information when you use the Platform:

• Browser type and version
• Device type and operating system
• Pages visited and features used
• Time and date of visits
• IP address (anonymized where possible)

2.3 Trading Data

When you use our trading features, we store:

• Trade journal entries (symbol, direction, prices, notes)
• AI-generated signals and analysis
• Chat conversations with AI assistants
• Price alerts and notification preferences

2.4 Third-Party API Keys

If you provide your own API keys (e.g., for Anthropic, xAI, or Polygon.io), they are stored encrypted in our database and are only used to make requests on your behalf. We never share your API keys with third parties.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Process and manage your account registration
• Deliver AI-powered trading analysis and signals
• Send price alerts and notifications you have configured
• Personalize your experience based on trading preferences
• Monitor and analyze usage trends to improve our services
• Detect, prevent, and address technical issues or fraud
• Communicate important updates about the Platform

4. Data Storage & Security

Your data is stored securely using Supabase, which provides:

• Encryption at rest (AES-256) and in transit (TLS 1.2+)
• Row Level Security (RLS) ensuring users can only access their own data
• Regular automated backups
• SOC 2 Type II compliant infrastructure

While we implement commercially reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We integrate with the following third-party services:

Each third-party service has its own privacy policy. We encourage you to review their policies. We only share the minimum data necessary for each service to function.

6. Data Sharing & Disclosure

We do not sell your personal data. We may disclose information only in these circumstances:

• Service providers: Third-party services that help us operate the Platform (listed above)
• Legal compliance: When required by law, subpoena, or government request
• Safety: To protect the rights, property, or safety of Mercury Solutions, our users, or the public
• Business transfers: In connection with a merger, acquisition, or sale of assets

7. Your Rights

You have the right to:

• Access — Request a copy of your personal data
• Correction — Update or correct inaccurate information
• Deletion — Request deletion of your account and associated data
• Portability — Export your trading data in a machine-readable format
• Withdraw consent — Opt out of optional data processing at any time

To exercise any of these rights, please contact us at privacy@mercurysolutions.ca.

8. Cookies & Local Storage

We use essential cookies for authentication session management (provided by Supabase Auth). We do not use advertising or third-party tracking cookies. We may use browser local storage to persist user preferences such as theme settings and UI state.

9. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it. Anonymized, aggregated data may be retained indefinitely for analytics purposes.

10. Children's Privacy

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

11. International Data Transfers

Your data may be processed and stored in servers located in the United States and Canada. By using the Platform, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your country of residence.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: