Privacy Policy — LargeTrader AI

This Privacy Policy explains how personal data are processed on the website largetrader.ai (the LargeTrader AI chat, in its free version and with an account) and in the LargeTrader AI mobile app, pursuant to Article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR").

1. Data controller

The data controller is IDEAS INCUBATOR AG, Stanserstrasse 100, 6373 Ennetbürgen, Switzerland, company number CHE-114.536.253 MWST.

For any request about your personal data you can write to [email protected].

The controller has assessed that the appointment of a Data Protection Officer is not required (Article 37 GDPR).

2. What data we collect

Account

When you create an account (on the website or in the app) or an administrator creates one for you, we collect your first name, last name, email address, phone number (required) and a password. The password is never stored as such: we keep only a one-way hash of it. You can change your first name, last name, phone number and password from your Profile.

The same account data (first name, last name, phone number and email) are also recorded in the client register of the AI server of the controller, which manages your conversations.

Sign-in with Google, Facebook and Apple

You can create an account or sign in with your Google, Facebook or Apple account instead of a password. In that case the provider you choose sends us an identifier of your account with that provider, your email address (with Apple it may be a private relay address that forwards the messages to yours) and, if available, your first and last name. We use them to create or recognise your account; to complete a new registration we also ask for your phone number and your choices about the emails. We keep the identifier linked to your account and the email address received when you linked it; we never receive your password with the provider, your contacts or your posts. Until you complete the registration, these data are kept in a temporary record for at most 15 minutes. To the provider we send only the request to sign in. From your Profile you can see the linked accounts, unlink them and set a password. Each provider processes your data under its own privacy policy: Google, Meta, Apple.

Chat content and dictation

We process the questions you ask, the answers you receive, the titles of your conversations and the ones you pin, the like or dislike you give to an answer with its optional comment, and the language of the interface sent with each question.

A copy of the text of each question you ask (never the answer), with its date, its language, the type of device and the topics used to answer it, is also saved in the database of this website, for statistics and to improve the service. These data are visible only to the administrators.

If you use voice dictation, the audio is sent to our AI server and to an AI model that turns it into text: the audio is never stored, neither on this website nor on the AI server.

Internal analyses with artificial intelligence. To understand how the service is used, the administrators of the controller can query the statistics of this website with the help of an artificial intelligence model. To do so, the model may receive the text of the questions, the statistical data on use and origin and, for registered clients, the first name, last name and an internal identification code. The model never receives the email address, phone number, IP address, user agent or visitor code. The text of each question, without any other data that identifies you, is also turned by an artificial intelligence service into a numerical representation, so that questions with the same meaning can be grouped together. These analyses serve only to improve the service. They produce no decisions about you and are not used to profile you for marketing purposes.

AI assistants connected by the administrators. The administrators of the controller can also connect an artificial intelligence assistant of their choice (Claude by Anthropic, ChatGPT by OpenAI or Gemini by Google) to this website and use it to analyse, in read-only mode, the text of the questions and of the answers of the chats and the statistics of the service. These data are pseudonymised: each person appears as a random code, and registered clients also with their first and last name. Nobody ever appears with the email address, phone number, IP address, user agent, visitor code or payment details. The texts are sent as they were written, so they contain whatever was written in them. Access is limited to the administrators, can be revoked at any time and is recorded. These analyses too serve only to improve the service and produce no decisions about you.

Free version (without an account)

You can use the chat without an account. In that case your single conversation is linked to a random visitor code kept in a cookie (lt_visitor): we do not ask for your name or email.

When you ask your first question, we record in the database of this website the text of your questions, the origin of your first visit (the campaign parameters (utm) if present, the website you came from, the social network and the in-app browser of a social network app in which the link was opened), the type of device (mobile, tablet or desktop) and the language. Of the visitor code we keep only a pseudonymised code (a one-way hash), never the code itself. We do not store your IP address or the user agent of your browser for this purpose: the user agent is only read to recognise the type of device and the app. If you use the free chat in the mobile app, the origin is simply the app.

If you then create an account or sign in, that conversation passes to your account, and the free chat is linked to your account in our statistics.

Shared links

If you share a conversation, anyone who has the link can read it, in read-only mode, even without an account. You can revoke the link at any time. To prevent abuse, the reads of shared links made without an account are limited per IP address; the IP addresses used for this limit are kept for at most two days.

If you share a conversation on a social network or in a messaging app (X, Facebook, LinkedIn, WhatsApp or Telegram) with the buttons of the share window, the network you choose opens in a new page: we load no script of the social networks. The link then carries campaign parameters that say which network it comes from. The title and summary of the conversation, proposed by the artificial intelligence and editable by you before sharing, are shown publicly in the preview of the link, also to the preview systems of the social networks.

Technical and security data

To protect the service we process:

your IP address and the user agent of your browser, stored with your sessions;
a record of the actions that matter for security (sign-in, password change, actions of the administrators), with the IP address;
failed sign-in attempts, with the IP address, kept for 15 minutes;
anti-abuse counters per IP address or per user, deleted after about 10 minutes;
the technical logs of the hosting platform.

Origin of the visits and of the registrations

When you arrive on the website from a campaign, from another website or from the in-app browser of a social network app (for example Instagram, Facebook, LinkedIn or TikTok), we record the campaign parameters (utm) and the identifiers of the advertising click if present, the landing page, the website you came from and the app in which the link was opened, in a cookie (lt_attribution) kept for up to 90 days. From these data we derive the channel (for example campaign, social network, search engine or other website) and the social network. The origin is therefore recorded also without campaign parameters, and also for those who use the free chat without registering. If you create an account, these data are saved with it and the cookie is deleted. They are visible only to the administrators.

Country

When you ask a question, create an account or sign in, we derive the country from your IP address with the database IP Geolocation by DB-IP (licence CC BY 4.0) and we keep only the country code (for example IT) with the question, the free chat or the account. The IP address is not stored for this purpose and is not sent to DB-IP: the database is used on our servers. The country derived from the IP address may be inaccurate, for example if you use a VPN.

Emails

When you register on the website you tick two boxes: with the first you confirm that you have read this policy and agree to receive service emails about your account; with the second you consent to receive news, educational content and offers of LargeTrader AI by email (the newsletter). We record each choice separately, with its date, how it was given, the version of the text and of this policy and the language shown, never the IP address. If you registered before the newsletter was introduced, you receive it too; if you registered from the app or an administrator created your account, you receive it only if you switch it on in your Profile.

The emails are sent through Amazon Simple Email Service (Amazon Web Services, Inc., region us-east-1, United States), which receives your email address and the content of the message. We record whether each email was delivered, bounced, rejected, delayed or reported as spam, and the status of your subscription. In the newsletter we also measure whether the email is opened (with an invisible image) and which links are clicked, to understand how effective our communications are: the links pass through our website, which records the click and then opens the page. For each open or click we record only the time, the link, the type of device, the country derived from the IP address and whether it was probably an automatic download (for example by the privacy protection of your email program or by a security filter); we do not store the IP address or the user agent of your browser. The links to our website also contain campaign parameters (utm) that show which email and which link the visit came from.

The service emails are sent automatically when something happens on your account: for example the welcome after registration, the change of the password, the deletion of the account and, if you buy a service, the payments, the end of a trial, the blocking of the renewal and the expiry of the service. They are sent also if you are not subscribed to the newsletter, contain no promotional content and have no unsubscribe link. In these emails we measure only which links are clicked, in the same way, without the invisible image.

Every newsletter contains a link to unsubscribe with one click (also from the unsubscribe button of your email program) and to manage your preferences; you can also switch the newsletter off from your Profile. Unsubscribing does not close your account: you keep receiving only the service emails. If an email to your address bounces permanently or you report it as spam, we stop sending you the newsletter. The page opened by the link uses neither Google Analytics nor advertising pixels.

To check that nobody sends emails in our name, our mailbox on Google Workspace receives the technical reports (DMARC) of the email providers, which we read automatically: they contain only the IP addresses of the mail servers that sent emails in our name and counts, no data about you.

Purchases and payments

If you buy a paid service, we record the order, the payments, the invoices and the billing details you enter (address and country and, for a company, its name and VAT number). You pay on the payment page of Stripe or of PayPal: the card details are entered directly in the form of Stripe and never reach our servers. We do not save your payment methods: you enter the method at every new purchase, and the renewals of a subscription are charged by Stripe or PayPal until you cancel it from your Profile. For some purchases the seller is Link, a service of the Stripe group, which sells on its own account, adds the taxes due in your country and sends the receipts: in that case Link receives your payment data under its own privacy policy. The name, address and email you enter on the payment page of Stripe are saved in your customer record at Stripe. To offer each free trial only once per person and per product, we keep a one-way hash of your email address, of the card fingerprint or of the PayPal payer identifier. On each order we record the version of the authorisation to charge the renewals that you accepted; if you delete your account, the subscriptions are cancelled.

With each order and each payment we also record its origin: the campaign parameters (utm), the website you came from and the type of device of your last visit, kept for up to 7 days in a cookie (lt_last_attribution), or, if there are none, those of the order or of your registration. These data are visible only to the administrators and are not sent to any artificial intelligence service.

Mobile app

The LargeTrader AI app keeps its access tokens in the secure storage of your device; the name of the device (optional) and the version of the app are stored with your session. The app uses the microphone only when you use dictation. It does not access the camera, photos, contacts or location and does not send push notifications.

Deleting the account

You can delete your account from your Profile on the website or from the app. The account is deactivated: you can no longer sign in, all your sessions and devices are signed out and nobody can register again with the same email address, while the account data and your conversations are kept. To reactivate the account, write to [email protected].

Help videos

The video courses and the «?» buttons of the tools show short help videos. When you play one, we record which video, in which language and where (video courses or tool), how far you watched it, the country (not the IP address) and, if you give them, your vote, its reason and a comment, which only our team reads. Without an account these data are linked to a random code in a cookie (lt_viewer), of which we keep only a one-way hash; they pass to your account when you register or sign in. The videos are delivered by Bunny (BunnyWay d.o.o., Slovenia), which receives your IP address. These data serve only to improve the videos, are kept without a time limit for statistics and produce no decisions about you.

Personalised messages and profiling

We can send you emails (only if you are subscribed to the newsletter) and show you messages on the website and in the chat, always marked «From LargeTrader», along automatic paths that depend on what you do on the service: for example the questions you ask, the trials you start, your purchases, the emails you open and the help videos you watch. Some of these steps use an artificial intelligence model, reached through our AI server and the provider OpenRouter, to place you in a marketing category (for example your level of experience with trading), to decide which message suits you and to write the text of the message in your language. For this the model receives only your language and country, the date of your registration, a summary of your recent questions, the actions you took on the service with their date, your purchases and trials, the emails and messages you received, opened or clicked, and the categories already assigned to you. It never receives your name, email address, phone number, IP address, visitor code or payment details, nor what you wrote to the support or in comments. The categories are saved with your account for a limited time (at most one year). The legal basis is the legitimate interest of the controller in proposing relevant content (Article 6(1)(f) GDPR) and, for the emails, your consent to the newsletter. These steps only choose which marketing message to show you: they never change prices, your access to the service or your rights, so no decision of Article 22 GDPR is taken. You can object at any time by switching off Personalised messages in your Profile: from then on no artificial intelligence is used to profile you or to write messages for you.

3. Purposes and legal bases

We process your data to:

provide the service (account, chat, free version, shared links, app): performance of a contract or of pre-contractual measures (Article 6(1)(b) GDPR);
let you sign in with Google, Facebook or Apple, if you choose to: performance of a contract or of pre-contractual measures (Article 6(1)(b) GDPR);
protect the service from fraud and abuse (limits, records of the security actions): legitimate interest of the controller (Article 6(1)(f) GDPR);
produce statistics on the use of the website with Google Analytics, without data such as your name or email: legitimate interest of the controller (Article 6(1)(f) GDPR);
measure the origin of the registrations and of the free chats (campaigns, websites, social networks) and produce statistics on the questions to improve the service: legitimate interest of the controller (Article 6(1)(f) GDPR);
analyse the statistics of the service and group the questions by meaning, also with artificial intelligence tools, for internal use only: legitimate interest of the controller (Article 6(1)(f) GDPR). No automated decision-making concerning you takes place (Article 22 GDPR);
analyse the pseudonymised data of the chats and the statistics with the AI assistant connected by an administrator, and record the country derived from the IP address for statistics, with pseudonymisation, read-only access limited to the administrators and a record of the accesses: legitimate interest of the controller (Article 6(1)(f) GDPR);
send the service emails about your account: performance of a contract (Article 6(1)(b) GDPR);
send the newsletter and commercial communications by email: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time, without closing the account and without affecting the lawfulness of the processing carried out before; keep the history of the consents to prove them and handle bounces and spam reports: legitimate interest of the controller (Article 6(1)(f) GDPR);
measure the opens and the clicks of the newsletter and the clicks of the service emails, to understand how effective our communications are, without storing the IP address: legitimate interest of the controller (Article 6(1)(f) GDPR);
manage the purchases of the paid services, the payments, the renewals and the invoices: performance of a contract (Article 6(1)(b) GDPR) and, for the invoices and the accounting records, legal obligations (Article 6(1)(c) GDPR); offer each trial only once and record the origin of the purchases: legitimate interest of the controller (Article 6(1)(f) GDPR);
comply with legal obligations (Article 6(1)(c) GDPR);
establish, exercise or defend legal claims: legitimate interest of the controller (Article 6(1)(f) GDPR).

The newsletter campaigns are the same for everyone who receives them in the same language. The personalised messages and the profiling with artificial intelligence are described above in «Personalised messages and profiling»; you can switch them off at any time in your Profile.

4. Providing your data

Providing your data is optional. The free chat works without an account. To create an account, however, the first name, last name, email address, phone number and password are required: without them the account cannot be created.

If you register with Google, Facebook or Apple, the password is not needed; the phone number is still required.

5. Providers and recipients

Your data are processed by authorized personnel of the controller and, only as far as needed, by:

the AI server of the controller (LargeTrader AI), which answers the questions and stores the conversations;
the providers of artificial intelligence models, which receive the questions and the dictation audio to produce answers and transcriptions and, for the internal analyses, the text of the questions and the statistical data described in section 2 (for registered clients also the first and last name);
a news search provider, which receives the text of the news searches;
the providers of market data, which receive no personal data;
Anthropic, OpenAI or Google, as providers of the AI assistant (Claude, ChatGPT or Gemini) that an administrator has connected for the internal analyses, which receive only pseudonymised data (with the first and last name of registered clients), the statistics and the text of the questions and of the answers; DB-IP receives no data, because its database is used on our servers;
DigitalOcean, which hosts the website, the database and the AI server in data centers in New York (United States);
Google (Google Analytics, property G-PFXP7RV1FK) for the usage statistics;
Cloudflare (Turnstile), for the security check at registration;
Amazon Web Services, Inc. (Amazon Simple Email Service, region us-east-1, United States), as processor, which sends the emails and receives the email address, the content of the message and the delivery events;
Stripe (card payments and the other methods of its payment page), Link (a service of the Stripe group, when it sells the service on its own account) and PayPal (payments and subscriptions with a PayPal account), which receive the data needed to process the payments;
Google, Meta Platforms (Facebook) and Apple, only if you choose to sign in with them, which receive the request to sign in and send us the data described in section 2;
public authorities, when the law requires it.

We do not sell your personal data.

6. Cookies

The website uses the following cookies:

Name	Purpose	Duration	Set by
lt_session	Keeps you signed in (technical)	Until you sign out or the session expires (30 days, renewed while you use the site)	largetrader.ai
lt_visitor	Visitor code of the free chat (technical)	1 year	largetrader.ai
lt_viewer	Anonymous code of the help videos: links the views and votes of those without an account (technical)	1 year	largetrader.ai
lt_attribution	Origin of the first visit: campaign parameters, or the website or social network app you came from	Up to 90 days; deleted at registration	largetrader.ai
lt_last_attribution	Origin of the last visit (campaign parameters or the website you came from), saved with a purchase	Up to 7 days; deleted at the purchase and at sign-out	largetrader.ai
lt_ai_env	Administrators only: choice of the AI server	1 year	largetrader.ai
theme, panel, sidebar	Interface preferences (theme, side panel, conversation list)	1 year	largetrader.ai
NEXT_LOCALE	Language of the interface	Until the browser is closed	largetrader.ai
_ga, ga*	Usage statistics (Google Analytics)	As set by Google	Google
lt_social_*	Sign-in with Google, Facebook or Apple: protects the sign-in from forgery and keeps the registration in progress (technical)	Up to 15 minutes	largetrader.ai

On the registration page, Cloudflare Turnstile checks that you are not an automated program and may process technical data of your browser.

On the purchase page and in the Profile, Stripe and PayPal load their payment forms and may set their own technical cookies, also to prevent fraud. When you close a notice shown at the top of the pages, the choice is remembered only in your browser until you close it.

For the data processed by these third parties, see the privacy policies of Google and Cloudflare. You can block or delete cookies from the settings of your browser; without the technical cookies the website does not work.

7. Transfers abroad

The data are stored in the United States (DigitalOcean, New York), and some providers may be located in countries outside Switzerland and the European Economic Area. These transfers take place on the basis of data sharing agreements and of the appropriate safeguards provided by the applicable law. Amazon Web Services, Inc., which sends the emails from the United States, is certified under the EU-U.S. Data Privacy Framework, and the transfers also rely on the standard contractual clauses of its data processing addendum.

8. Retention

Account: kept while it exists. When you delete it, the account is deactivated, not erased: the account data and the conversations are kept, and the email address cannot be used for a new registration.
Conversations: kept on the AI server without a time limit; deleting a conversation removes it from your list.
Sessions: deleted when they expire or when you sign out.
Security data: failed sign-in attempts for 15 minutes, anti-abuse counters for about 10 minutes, IP addresses of the anonymous reads of shared links for at most two days, records of the security actions for as long as needed for security.
Questions: the text of the questions of all users, with and without an account, is kept without a time limit, for statistics and to improve the service.
Origin of the registration: kept with the account. Origin of the free chats, with the pseudonymised visitor code: kept without a time limit, for statistics.
Country: only the country code, kept with the question, the free chat or the account it belongs to; the IP address used to derive it is not stored.
Emails: the delivery events (delivered, bounced, rejected, delayed, reported as spam) for 24 months; the history of your choices about the emails for the whole life of the account and for 10 years afterwards, to prove them.
Opens and clicks of the emails: the time, the link, the type of device and the country of each open or click, without the IP address, kept without a time limit, for statistics.
Purchases: orders, payments and invoices for 10 years, as required by accounting and tax law; the summary of a payment method and the origin of each purchase for as long as the payments they belong to.
Linked accounts (Google, Facebook, Apple): kept while they are linked and deleted when you unlink them; the data received for a registration not completed are deleted within 15 minutes.
Other data: for the time strictly necessary for the purposes for which they were collected.

9. Security

The website uses encrypted connections (HTTPS). Passwords are stored only as a one-way hash, and when you change your password the other sessions are signed out. Card details are entered in the secure form of Stripe and payments with PayPal take place on PayPal: they never reach our servers. Choose a strong password and do not share it.

10. Minors

The service is not intended for people under 18 years of age.

11. Your rights

You have the right to access your data, to have them rectified or erased, to restrict or object to their processing and to data portability (Articles 15 to 22 GDPR), and the right to lodge a complaint with a supervisory authority.

You can do much of this by yourself: from your Profile you can change your first name, last name, phone number and password and delete your account; from the chat you can delete your conversations and revoke the links you shared. For anything else write to [email protected] or by post to IDEAS INCUBATOR AG, Stanserstrasse 100, 6373 Ennetbürgen, Switzerland. Exercising your rights is free of charge.

12. Changes to this policy

We may update this policy. The version in force is the one published on this page, with the date of its last update shown at the top.

13. Not financial advice

The answers of the chat are for information purposes only: they are not a solicitation to invest, financial advice or a recommendation to carry out any transaction. Every investment decision, and its risk, is yours alone.