MindGuard Privacy Policy

1. Who we are

MindGuard is an independent software product operated by a solo founder, providing an AI-powered trading psychology coach through a Chrome browser extension and web services.

Website: https://mindguardai.io
Contact: legal@mindguardai.io

For the purposes of GDPR and CCPA, MindGuard acts as the "data controller" for personal data processed about users of the service.

2. What this policy covers

This Privacy Policy applies when you install or use the MindGuard Chrome extension, create or access a MindGuard account, use the AI coach, visit the website, or otherwise interact with MindGuard services.

It does not apply to third-party trading platforms such as Tradovate, your broker, or other services that have their own privacy policies.

3. Data we collect

3.1 Account and contact data

• Name (if provided during registration or profile setup)
• Email address (required for account creation, login, and communication)

3.2 Trading activity and behavioral data

• Trading activity from the Tradovate platform: entries, exits, position size, timestamps, P&L
• Behavioral signals: click patterns, order hesitation times — primarily processed locally in your browser

3.3 Psychological and profiling data

• Answers to onboarding questionnaires about trading habits, goals, and risk tolerance
• Self-reported emotional and mental state data (mood check-ins, stress levels, session notes)

3.4 AI coach interaction data

• Chat conversation history with the AI coach, including your messages and generated responses
• Feedback you provide on AI responses

3.5 Technical and usage data

• Browser type, extension version, language settings, operating system, approximate region
• Log data: timestamps of logins, API calls, and errors associated with your account

4. How we use your data

• Authenticating you and maintaining your MindGuard account
• Detecting psychological bias patterns (revenge trading, FOMO, overconfidence) and generating personalized insights
• Powering the AI coach for post-trade debriefs and mental performance coaching
• Sending transactional emails (welcome, password reset) via our email provider
• Maintaining security, preventing fraud, and improving the service
• Complying with legal obligations

MindGuard does not sell your personal data and does not share your data with Tradovate, your broker, or other trading platforms.

5. Legal bases for processing (GDPR)

• Contract: To provide the MindGuard service you requested
• Legitimate interests: To maintain, improve security, and develop new features
• Consent: For optional questionnaires and mental health disclosures — withdrawable at any time
• Legal obligation: To comply with applicable laws

6. Third-party services

• Anthropic Claude API: AI processing for coach responses. Relevant conversation context may be sent to Anthropic as a processor.
• Neon.tech: PostgreSQL database hosting for account data, trading features, and conversation metadata
• Resend: Transactional email delivery (welcome emails, password resets)
• Google Chrome: Extension distribution and runtime platform

All vendors are contractually limited to using your data only to provide services to MindGuard.

7. Data sharing

MindGuard may share your data only with:

• Service providers performing services on our behalf (under written agreements)
• Professional advisors (lawyers, accountants) where necessary
• Authorities when required by valid legal process
• Acquirers in connection with a merger or sale of assets (with prior notice)

8. Data retention

• Account and profile data: retained while your account is active and for a reasonable period afterward
• Trading data, AI history, psychological profile: retained while active, then limited period after closure unless deletion is requested
• Log files: shorter periods as needed for security and audit

When data is no longer needed, MindGuard deletes or anonymizes it.

9. Cookies and chrome.storage

MindGuard does not rely on traditional browser cookies. The extension uses chrome.storage to store settings and cached data locally on your device. You can clear this through your browser settings or by uninstalling the extension.

10. Your rights

GDPR (EU/UK/EEA users)

• Access, rectification, erasure, restriction, portability, and objection
• Right not to be subject to solely automated decision-making with significant effects
• Right to withdraw consent and to lodge a complaint with your local data protection authority

CCPA/CPRA (California residents)

• Right to know, access, delete, and correct personal information
• Right to opt-out of sale — MindGuard does not sell personal data
• Right to non-discrimination for exercising privacy rights

To exercise any right, email legal@mindguardai.io.

11. Security

MindGuard uses encryption in transit, access controls, and logical environment separation. No security practice can guarantee complete protection. We will notify you and relevant authorities of breaches where required by law.

12. Children's privacy

MindGuard is intended for adults engaged in trading and is not directed to children under 16. We do not knowingly collect data from children under 16.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Effective date" above and may be communicated via email or in-app notice.

14. Contact

Email: legal@mindguardai.io
Website: https://mindguardai.io