Privacy Policy
Effective: April 22, 2026 · Last updated: April 22, 2026
Short version: we collect only what we need to run the service, we don't sell your data, we don't run ad trackers, and you can delete your account and your data any time. The rest is the details.
1. Who we are
This policy describes how Market FSD (operated by bnetdev.com, 38 W. 20th St, Paris, KY 40361) collects, uses, and safeguards information when you use our website and services.
2. Information we collect
Account data
- Email address (required)
- Display name (optional)
- Password — stored as an Argon2id cryptographic hash; we never see your plaintext password
- Email-verification status, account status, role
- Account creation and last-login timestamps
Subscription & billing data
- Subscription tier and status, trial and period end dates
- PayPal subscription ID and plan ID
- We do NOT receive, store, or process payment-card numbers. PayPal handles payment information directly under its own privacy policy.
Service data you provide
- Your watchlist tickers and settings
- Digest and alert preferences
- Contact-form submissions (name, email, message, topic)
- If you connect Tradier: a Tradier API token and account number that you generate — stored server-side and used only to place orders on your instructions
Usage data
- IP address, user-agent string, referring URL, timestamps — collected in standard server access logs for security, debugging, and abuse prevention
- Session cookies for authentication (no cross-site tracking cookies, no third-party ad trackers)
3. How we use your information
- Operate the service: authenticate you, deliver signals and briefs to your email, render your dashboard
- Billing: process subscription payments through PayPal
- Security: detect abuse, enforce rate limits, comply with law
- Communication: send transactional emails (verification, billing, alerts) and, if you opt in, product-update notices
- Improvement: diagnose bugs, analyze aggregate usage patterns
4. Third-party services we use
We share only the minimum data needed with these providers, and only to deliver the service. None sell your data on our behalf.
| Provider | What they see | Why |
|---|---|---|
| PayPal | Email, subscription ID, billing events | Process payments, manage subscriptions |
| Postmark | Recipient email, message content | Deliver transactional email (verification, alerts, digests) |
| Tradier | Your broker API token you provided | Place trades you authorize; they also hold your funds per your account with them |
| AI inference provider | Public market data + your watchlist tickers (no PII) | Generate signal rationales and briefs |
| SEC EDGAR, Finnhub, FMP, Finviz, Yahoo, Tradier data | No personal data sent | Public market data sources — we read, they don't see you |
| Cloudflare / CDN (if used) | IP, request headers | Protect against DDoS and abuse |
5. We do not sell your data
We do not sell your personal information, and we do not share it with advertisers, data brokers, or marketing partners. We will only disclose information when legally required (subpoena, court order), when necessary to protect rights or safety, or when you explicitly direct us to.
6. Cookies & tracking
We use a single session cookie (mfsd_sess) for authentication. We do not use third-party analytics trackers, advertising pixels, or cross-site tracking. If you block the session cookie, login won't work — otherwise nothing breaks.
7. Data retention
Account, subscription, watchlist, and signal-interaction data is retained while your account is active and for up to 90 days after cancellation in case you come back. After that we delete or anonymize it, except where retention is required for legal, tax, or audit reasons (typically up to 7 years for financial records). Server logs roll off after 90 days.
8. Security
We take reasonable administrative, technical, and physical measures to protect your data, including TLS encryption in transit, Argon2id password hashing, server-side secret storage, and principle-of-least-privilege for internal access. No system is perfectly secure; if we discover a breach that affects you, we will notify you in accordance with applicable law.
9. Your rights
You can, at any time:
- Access a copy of the personal data we hold about you
- Correct inaccurate information
- Delete your account and associated data (email us at bbussell@bnetdev.com)
- Export your watchlist and subscription records in a common format
- Opt out of any non-transactional emails (transactional messages like verification, billing receipts, and critical account notices will continue)
- Revoke your Tradier API token from your broker's dashboard — our access ends immediately
10. California residents (CCPA)
If you reside in California, you have the rights described in section 9 plus the right to know the specific pieces of personal information we hold about you and to request its deletion. We do not sell personal information, so opt-out of sale does not apply. To exercise your rights, contact bbussell@bnetdev.com.
11. European residents (GDPR)
If you are in the EU/EEA/UK, you have rights to access, rectification, erasure, restriction of processing, data portability, and objection. Our legal basis for processing is (a) performance of our contract with you (the subscription), (b) your consent where applicable, and (c) our legitimate interests in operating and securing the service. Complaints can be filed with your local data-protection authority; we'd appreciate the chance to address them first.
12. Children
Market FSD is not directed at anyone under 18 and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it.
13. International transfers
Our servers are located in the United States. By using the service from outside the U.S., you consent to the transfer, storage, and processing of your information in the U.S., which may have different data-protection laws than your country.
14. Changes to this policy
We may update this policy from time to time. Material changes will be announced by email or through the service at least 15 days before they take effect. The effective date at the top of this page indicates when the current version took effect.
15. Contact
Privacy questions, requests, or complaints: bbussell@bnetdev.com or write to Market FSD c/o bnetdev.com, 38 W. 20th St, Paris, KY 40361.