Privacy policy
Last updated 2 November 2026.
What we collect
If you create an account, we store your email address to send sign-in and password reset codes and to link your subscription. If you set a password, we store a salted password hash, not the password itself. Password reset codes expire after 10 minutes. Account deletion removes your password hash and reset codes. We store a random device identifier and daily usage counters to apply plan limits. Requests and security logs may also contain technical information such as an IP address and request time.
Device storage
ChartArrow stores settings and chart information, including watchlists and drawings, on your device or in your browser. Information you submit for analysis, imports or alerts is also sent to our service as needed to provide those features.
AI analysis
When you tap Analyze, we send the chart's price candles and your active indicator settings to our service, which forwards them to OpenAI or through OpenRouter to the configured AI model provider. Ask the AIs sends chart context and any question you type to OpenAI and through OpenRouter to the selected AI models. When you import a watchlist screenshot, the image is sent through OpenRouter to an AI model to read the tickers. Opening the AI panel by itself does not send an analysis request. Analysis data and results may be cached. Third-party providers process the information sent to them; their handling and retention should be reviewed against their current policies.
Alerts
If you create alerts, we store their settings and triggered history with your account. If you enable email notifications for an alert, Resend processes and sends that alert to your account email address. Resend also sends sign-in and password reset codes.
If you enable iPhone notifications, we store your device's push token with your account and sign-in session, along with notification delivery status. Apple receives the push token and alert content to deliver the notification. Signing out removes that session's registered token. Deleting your account removes your device registrations and notification delivery records. You can turn notifications off in iPhone Settings.
Support and feedback
When you use live chat, report a bug or request a feature, we store the conversation, messages, timestamps and type of request with your account. Only you and authorized support staff can access your conversation. Resend sends notification emails containing a sign-in link, without the message content. Support messages remain until you delete your account; account deletion removes your conversations and messages you authored. Emails already delivered are subject to the recipient and email provider retention policies.
Payments
Website subscriptions use Stripe, which handles website payment details. We keep account and subscription information, including Stripe customer and subscription status, to manage access. Native subscriptions, when available, are purchased through Apple or Google Play, which handle payment details. We do not receive your card number for native purchases. To verify and manage native access, we receive store transaction identifiers or purchase tokens and store subscription product, status and expiry information linked to your ChartArrow account. We store verification handles encrypted and keep hashed purchase ownership records to prevent a purchase being linked to another account.
Affiliate program
If you join the affiliate program, we store your account, referral code and acceptance of the program terms. If you accept a sub-affiliate invitation, we also store the inviting affiliate relationship and the commission rate and terms version you accepted. If a signed-in customer chooses to apply a referral, we store the referral association. We may store eligible subscription and commission records, payout requests and review or payment records to administer the program.
Market data
Market data may be obtained from third-party providers, including Binance and Yahoo Finance.
Retention and deletion
Retention periods vary by data and provider. If you have a website subscription or Stripe customer record, after account deletion we retain a pseudonymous record derived from your email and the record creation date to check trial eligibility and prevent repeat trials. No expiry is currently configured for this record. For native purchases, we delete account-linked subscription and encrypted verification records on account deletion, but retain hashed purchase ownership records to prevent reassignment. After account deletion, we may retain hashed Stripe identifiers to handle delayed billing events and account references in affiliate financial records for reconciliation. You can delete your account in the app or email contact@chartarrow.com from the address you signed in with. Deleting your ChartArrow account does not cancel a subscription with Stripe, Apple or Google Play.