Privacy Policy

Last updated: May 10, 2026

This Privacy Notice for W-Pine AI ("we," "us," or "our") describes how and why we access, collect, store, use, and share ("process") your personal information when you use our services ("Services"), including when you visit our website at wpineai.com or any related site, or use the W-Pine AI platform — an all-in-one trading ecosystem powered by a state-of-the-art AI agent specifically trained to develop high-performance Pine Scripts. Our platform combines automated code generation with real-time sentiment and fundamental analysis, plus exclusive access to invite-only TradingView indicators and end-to-end support.

Questions or concerns? Reading this notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our practices, please do not use our Services. For any privacy questions, contact us at wpineai@gmail.com.

Summary of Key Points

What personal information do we process? When you use the Services we may process: name, email, payment data (handled by Stripe), HF Market username, TradingView username, Telegram handle, IP and device data, and content you submit to the AI agent.

Do we process sensitive information? No.

Do we collect from third parties? No, except for authentication providers if you choose social login.

How do we process your information? To provide the Services, communicate with you, prevent fraud, and comply with the law. Your prompts may be used in anonymized aggregate to improve our AI agent. You may opt out via your account settings.

With whom do we share? Service providers — Stripe (payments), Supabase (database & auth), Vercel (hosting), Anthropic (AI), Telegram (support routing). No sale of personal data.

Your rights? You can access, correct, delete, or export your personal data at any time. EU/UK/Canada/US-state residents have additional statutory rights detailed below.

How to exercise rights? Email wpineai@gmail.com or use the in-app data request form (Settings → Account).

1. What information do we collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register, complete your profile, contact support, submit prompts to the AI agent, or interact with our community channels. The personal information we collect may include:

• Full name
• Email address
• Telegram handle
• HF Market username (for free-tier verification)
• TradingView username (only for invite-only script access)
• Account password (stored in salted-hashed form by our auth provider)

Payment data

If you purchase a paid subscription, payment information (card number, expiry, CVC, billing address) is collected and processed by Stripe. We never see, store, or transmit your full card details. Stripe's privacy notice: stripe.com/privacy.

Information automatically collected

We automatically collect device and usage data when you use the Services, including IP address, browser type and version, operating system, language preference, referring URLs, country, and pages visited. This is used to maintain the security and operation of the Services and for internal analytics. Specifically:

• Log and usage data — diagnostic, performance, and audit-trail data our servers collect (timestamps, pages viewed, features used, error reports).
• Model training disclaimer — user-provided prompts may be used in an anonymized, aggregate format to improve our AI agents.
• Purpose of processing — to personalize your experience, refine Pine Script generation accuracy, and surface more relevant indicator recommendations.
• Derived data — we generate secondary insights (trading-style profiles, engagement scores) from your prompt history.
• Opt-out rights — disable derivative profiling or training-data use in Settings → Account → Data preferences.

2. How do we process your information?

We process your information to provide, improve, and administer the Services, communicate with you, secure your account, and comply with the law. Specifically, we process your information to:

• Create and authenticate your account.
• Deliver the AI agent, Pine Script generation, and invite-only indicator access.
• Respond to your inquiries and provide support.
• Send transactional emails (subscription confirmations, password resets, security alerts).
• Fulfill and manage subscription orders and payments.
• Enable communications between you and our support / community team via Telegram.
• Detect, prevent, and respond to fraud, abuse, or security incidents.
• Comply with legal obligations (tax, accounting, regulatory requests).
• Protect the vital interests of you or any third party.

3. What legal bases do we rely on?

We process your personal information only when we have a valid legal reason under applicable law.

If you are in the EU, UK, or Switzerland, we rely on: (a) your consent for marketing emails and optional model training, withdrawable at any time; (b) performance of a contract for delivering the paid Services; (c) legal obligations for tax, accounting, and law-enforcement cooperation; (d) legitimate interests for fraud prevention, product analytics, and security; and (e) vital interests in rare emergency situations.

If you are in Canada, we may process your information with your express or implied consent, withdrawable at any time. Limited exceptions apply (investigations, legal proceedings, breach defense).

4. When and with whom do we share your personal information?

We share your information only with service providers under written contract, and only as required to deliver the Services:

• Stripe — subscription billing and payment processing.
• Supabase — database, authentication, and file storage.
• Vercel — application hosting and edge delivery.
• Anthropic — large-language-model inference for the AI agent.
• Telegram — routing of support tickets and HF Market verification submissions to our admin team.

We may also share information in connection with a merger, acquisition, or asset sale, or when required by law (subpoena, court order, regulatory request). We do not sell or rent your personal information to advertisers.

5. Do we offer AI-based products?

Yes. The W-Pine AI Services include AI-powered features (the "AI Products"):

• Pine Script generation bot — converts natural-language prompts into TradingView Pine Script code.
• Finance research bot — sentiment, fundamental, and macro impact analysis (Advanced and Free-HFM tiers only).
• Chart vision — analyzes uploaded chart screenshots for entry / stop-loss / take-profit guidance.
• Predictive analytics and insights — internal tooling to surface relevant patterns across your interactions.
• Image analysis and AI development — supporting capabilities used to enhance the agent.

The AI Products are powered by Anthropic. Your input, output, and any chart images are sent to Anthropic's API for inference. Per our agreement with Anthropic, your data is not used to train third-party models. You must not use the AI Products in violation of Anthropic's usage policy.

6. How do we handle your social logins?

If we ever offer the option to register or sign in via a third-party provider (Google, Apple, X, Facebook), we will receive a limited profile (typically name, email, avatar) from that provider. We will use that information only as described in this notice. We do not control the third-party provider's use of your information; please review their privacy notice separately.

7. Is your information transferred internationally?

Our infrastructure is hosted on Vercel and Supabase, with primary servers in Japan and Singapore. If you access the Services from the European Economic Area (EEA), the United Kingdom, Switzerland, or any other jurisdiction with data-protection requirements stricter than these countries, your data is transferred to and processed in those locations.

For transfers from the EEA, UK, and Switzerland we rely on the European Commission's Standard Contractual Clauses with our service providers. We and our key sub-processors (Anthropic, Supabase, Vercel, Stripe) self-certify compliance with the EU-US and Swiss-US Data Privacy Framework where applicable.

8. How long do we keep your information?

We retain personal information for as long as necessary to provide the Services and meet legal, accounting, or reporting requirements. Specifically:

• Account profile, conversation history, and subscription records: for the lifetime of your account, plus 90 days after account deletion (for fraud-investigation and dispute purposes).
• Payment and tax records: 7 years (or as required by your jurisdiction).
• Anonymized usage analytics: indefinitely.

When we no longer need your data, we delete it or anonymize it irrevocably.

9. How do we keep your information safe?

We have implemented appropriate technical and organizational security measures to protect your data:

• TLS 1.2+ for all data in transit.
• At-rest encryption on Supabase Postgres and storage buckets.
• Row-Level Security (RLS) on every personal-data table — no user can query data they don't own, even via direct SQL.
• Salted-hashed password storage via Supabase Auth (bcrypt).
• Tokenized payment storage via Stripe — we never see raw card details.
• Webhook signature verification on every Stripe and Telegram callback.
• Per-user isolated storage folders for uploaded files.

No system is unhackable. Despite our safeguards, no transmission over the Internet can be guaranteed 100% secure. You should access the Services from a trusted device on a trusted network.

10. Do we collect information from minors?

The Services are intended for users 18 years and older (or the equivalent age of majority in your jurisdiction). We do not knowingly collect data from or market to children under 18. If we learn we have collected personal information from a minor, we will deactivate the account and delete the data promptly. If you are a parent or guardian and believe your child has registered, please email wpineai@gmail.com.

11. What are your privacy rights?

Depending on your location, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your personal data (right to be forgotten).
• Restrict or object to certain processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent for any processing based on consent.
• Not be subject to automated decision-making with legal effect.
• Lodge a complaint with your local data-protection authority (e.g., the UK ICO, your EU Member State DPA, or Switzerland's FDPIC).

The fastest way to exercise any of these rights is to email wpineai@gmail.com. We respond to all verified requests within 30 days.

12. Controls for Do-Not-Track features

Most web browsers include a Do-Not-Track ("DNT") signal. There is currently no industry standard for honoring DNT signals, so we do not respond to them at this time. If a uniform standard is adopted in the future, we will update this notice.

13. Do U.S. state residents have specific privacy rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you have additional rights under your state's privacy law:

• Right to know what personal data we process about you.
• Right to access and obtain a copy of that data.
• Right to correct inaccuracies.
• Right to delete your personal data.
• Right to non-discrimination for exercising your rights.
• Right to opt out of targeted advertising, sale, or significant profiling. We do not sell personal data, do not target advertise, and do not engage in profiling that produces legally significant decisions.

To exercise these rights, email wpineai@gmail.com or contact us via Telegram @wpineaiadmin. If we deny your request, you may appeal in writing — we will respond within 60 days.

14. Do other regions have specific privacy rights?

Australia and New Zealand

We comply with Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. You may request access, correction, or deletion of your data by emailing wpineai@gmail.com. If you believe we have unlawfully processed your data, you may complain to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.

Republic of South Africa

You may request access or correction of your personal information by emailing us. Complaints can be directed to the Information Regulator (South Africa) at enquiries@inforegulator.org.za.

15. Do we make updates to this notice?

Yes. We update this Privacy Policy as our practices change and as new laws come into effect. We will indicate the "Last updated" date at the top. For material changes, we will notify active users by email and post a prominent notice on the Services.

16. How can you contact us?

For any privacy-related question, email wpineai@gmail.com or message us on Telegram at @wpineaiadmin. We are based in Singapore.

17. How can you review, update, or delete your data?

Sign in to your W-Pine AI account and visit Settings → Profile to review and update your data. To request deletion, email wpineai@gmail.com from the address registered to your account; we will permanently delete your personal data within 30 days, except as required for legal retention.