Privacy policy

Last updated: December 4, 2025

Information we collect

Minimal Data Collection: As an educational research collective, we collect very limited information:

  • Basic website analytics (page views, visitor counts)
  • Technical information for website functionality

No Personal Information Required: We do not:

  • Require user registration or accounts
  • Collect email addresses or contact information
  • Store API keys or trading credentials
  • Collect financial or investment information
  • Use cookies for tracking or advertising

Technical Information: We may automatically collect:

  • IP address (for basic analytics only)
  • Browser type and version
  • Device information (for responsive design)
  • Page visit statistics (anonymous)

How we use your information

We use the limited information we collect for the following purposes:

  • Maintain and improve our educational website
  • Understand which content is most valuable to visitors
  • Ensure website security and prevent abuse
  • Optimize website performance and user experience

No Commercial Use: We do not use any information for marketing, advertising, or commercial purposes. Our collective operates purely for educational research.

Information sharing

We do not sell, trade, or share any personal information. Since we collect minimal data and operate as an educational collective, there is very little information to share.

Limited Sharing: We may share anonymous, aggregated website statistics only in the following circumstances:

  • With hosting providers for technical maintenance
  • If required by law or legal process
  • To protect against abuse or security threats

No Third-Party Services: We do not use:

  • Advertising networks or tracking services
  • Marketing automation tools
  • Customer relationship management systems
  • Payment processors (since we don't charge fees)

Data security

We implement industry-standard security measures to protect your information:

  • End-to-end encryption for sensitive data
  • Secure API connections and authentication
  • Regular security audits and vulnerability assessments
  • Access controls and employee training
  • 24/7 monitoring and threat detection

Important: While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Your rights and choices

You have the following rights regarding your personal information:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal data
  • Portability: Receive your data in a portable format
  • Objection: Object to certain processing activities
  • Withdrawal: Withdraw consent at any time

To exercise these rights, please contact us at privacy@resonance.markets

Data retention

We retain your personal information only as long as necessary to:

  • Provide our services and maintain your account
  • Comply with legal and regulatory requirements
  • Resolve disputes and enforce agreements
  • Improve our services and develop new features

Retention Periods:

  • Account data: Until account deletion or 7 years after last activity
  • Trading data: 7 years for regulatory compliance
  • Communication records: 3 years
  • Analytics data: 2 years

International data transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

  • Standard contractual clauses
  • Adequacy decisions
  • Certification schemes
  • Other approved transfer mechanisms

GDPR compliance (EU residents)

Legal Basis for Processing: We process your personal data based on:

  • Contract: To provide our copy trading services
  • Legitimate Interest: To improve our services and prevent fraud
  • Consent: For marketing communications (where applicable)
  • Legal Obligation: To comply with regulatory requirements

Your GDPR Rights:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with supervisory authorities

Data Protection Officer: Contact our DPO at dpo@resonance.markets

CCPA compliance (California residents)

Categories of Personal Information: We collect:

  • Identifiers (email, account IDs)
  • Financial information (API keys, trading data)
  • Internet activity (usage data, preferences)
  • Professional information (investment experience)

Your CCPA Rights:

  • Right to Know: Request disclosure of personal information collected
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: Opt-out of sale of personal information
  • Right to Non-Discrimination: Equal service regardless of privacy choices

We Do Not Sell Personal Information: We do not sell, rent, or trade personal information to third parties.

Authorized Agent: You may designate an authorized agent to make requests on your behalf.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending email notifications to registered users
  • Displaying prominent notices on our platform

Continued Use: Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

Contact us

Collective: Resonance - Educational Research Collective

If you have any questions about this Privacy Policy or our data practices, please contact us:

Privacy: privacy@resonance.markets

Data Protection Officer: dpo@resonance.markets

Legal: legal@resonance.markets

Complaints: You also have the right to lodge a complaint with your local data protection authority.