Legal

Privacy Policy

Last updated 19 October 2026 · Effective 19 October 2026

This policy explains what personal data Chartify collects, why we collect it, who we share it with, how long we keep it, and what rights you have over it. It applies to the Chartify website at usechartify.com and to the Chartify application.

The short version. We collect what we need to run your account and the product: who you are, what you do in the app, and what you ask the AI. We never see your card details — Whop handles payment. We do not sell your data. We do run advertising pixels on our marketing pages, but not inside the product itself — section 09 explains them. Your chart questions are sent to our AI provider so they can be answered. You can ask for a copy of your data or ask us to delete it at any time.

01Who we are

The controller responsible for your personal data is SwiftAlgo UG (haftungsbeschränkt), Rupperather Ring 12, 53902 Bad Münstereifel, Germany. You can reach us at mail@chartify.gg.

02What we collect

Information you give us

  • Account details — your name and email address, and the password hash used to sign you in. We never store your password itself.
  • Content you create — drawings, chart layouts, indicator settings, presets, watchlists, price alerts, paper trades, and journal entries and notes.
  • AI prompts — the questions you ask the AI, and the chart context sent with them (symbol, timeframe and the price bars behind your view).
  • Support messages — anything you send us when you get in touch.

Setup page emails

If you enter your email address on our setup page and tap "Yes, send me tips", we send it to EmailOctopus through our own server at Cloudflare. With it goes your setup result: your trader type and its one-line description, your goal, your recommended plan, the tool you want to start with, and a short code of your answers. EmailOctopus first emails you a confirmation link, and nothing else is sent until you confirm. After that you receive your personal setup plus tips and offers about Chartify.

The buttons in these emails put that code after a "#" in the link, so it never reaches our servers. The page reads it to reopen your plan, then removes it from the address bar before any analytics or advertising tools load.

We do this with your consent, which you can withdraw at any time using the unsubscribe link in every email. If you tap "No thanks", your email address is not stored or sent anywhere.

Information collected automatically

  • Usage data — which features you use, AI credit consumption, and actions taken in the app, so we can operate the product and understand what needs fixing.
  • Technical data — IP address, browser and device type, operating system, timestamps, and error and diagnostic logs.

Information from third parties

  • Subscription status from Whop — whether your subscription is active, when it renews, and when it is cancelled. We do not receive your card number, expiry date or security code.

We do not ask for and do not want your brokerage or exchange credentials, API keys, or any information about your real account balances. Chartify has no ability to connect to a broker.

03Why we use it

  • to create and run your account and authenticate you;
  • to provide the product — draw your charts, save your work, run your alerts, keep your journal;
  • to generate AI responses to the questions you ask;
  • to meter AI credit usage against your plan;
  • to manage your subscription and confirm your access rights with Whop;
  • to diagnose faults, monitor performance, and keep the service secure;
  • to prevent abuse, account sharing and fraud;
  • to answer your support requests;
  • to send you service messages about your account, billing or material changes to the product;
  • to meet our legal, tax and accounting obligations.

We do not sell your personal data. We do not use your journal, your trading activity or anything you ask the AI to build advertising profiles, and we do not use them for any purpose other than providing the product to you. We do share limited activity on our public marketing pages with advertising networks to measure our ads — see Advertising and measurement.

04Legal bases

Where data protection law such as the GDPR applies to you, we rely on the following bases:

  • Performance of a contract — running your account, providing the features you pay for, and processing your subscription.
  • Legitimate interests — keeping the service secure and reliable, preventing abuse and fraud, and improving the product. We balance these against your rights and interests.
  • Legal obligation — retaining billing and tax records where the law requires it.
  • Consent — where we ask for it specifically, such as optional marketing email. You can withdraw consent at any time.

05AI processing

When you use an AI feature, your question and the relevant chart context — the symbol, the timeframe and the price bars behind your current view — are sent to our third-party AI provider so a response can be generated and returned to you.

Our AI provider is Anthropic, the maker of Claude. Anthropic processes this data on our instructions as a processor under a data processing agreement, and under its commercial terms it does not use the inputs or outputs of our API usage to train its models.

Please do not put sensitive personal information into AI prompts or journal notes. The AI needs the chart, not your identity, your account size or your personal circumstances.

06Who we share it with

We share personal data only with service providers who help us run Chartify, and only as far as they need it. Each acts as a processor under contract.

  • Whop — subscription and payment processing.
  • Cloudflare — website and application hosting, content delivery, and security.
  • Anthropic (Claude) — generating AI responses.
  • Tiingo and AllTicks — supplying the price data shown in charts.
  • EmailOctopus — sending the emails you ask for on our setup page. Based in the UK; your data is stored on EU servers.
  • Umami — counting visits to this website. Cookieless, EU-hosted, and it never receives your account, your journal or anything you ask the AI.

Separately, we share limited activity on our marketing pages with Meta, Google, TikTok, X and Whop to measure our advertising. Those five are not processors: they use what they receive for their own purposes as independent controllers, and we cannot control that use. Advertising and measurement sets out exactly what is sent.

We may also disclose data where we are legally required to, to enforce our terms, or to protect the rights, safety or property of Chartify or others. If our business is ever sold or restructured, data may transfer as part of that transaction — we would notify you beforehand.

07Payment data

Payments are handled entirely by Whop. Your card number, expiry date and security code are entered on Whop's systems and are never transmitted to or stored by us. We receive only what we need to grant access: your subscription status and renewal dates. Whop's own privacy policy governs their handling of your payment information.

On usechartify.com/gtrial, usechartify.com/offer1 and usechartify.com/offer2, Whop's checkout form opens inside our page when you choose a plan, so you can pay without leaving it. It is loaded from Whop (cdn.whop.com) only when you open the checkout, and what you type into it goes directly to Whop, not to us. If you gave us your email address earlier on that page, we fill it into Whop's form so you don't have to type it again. Once the advertising pixels are allowed to run, we also pass Whop the campaign tags from the link that brought you to our site, as described in section 09.

08Cookies and local storage

We use cookies and browser local storage for things the product cannot work without: keeping you signed in, remembering your chart layout, symbol, timeframe, indicator settings and theme, and protecting against abuse.

That also covers the record of your cookie choice itself, stored under chartifyConsent: it is what stops us asking you the same question on every page. Alongside it we keep the result of the country check described in Advertising and measurement under chartifyGeo, for the length of your visit only. Neither is shared with anyone, and neither needs your consent, because without them we could not honour the answer you gave.

On our setup pages at usechartify.com/quiz, usechartify.com/start, usechartify.com/trial, usechartify.com/gtrial, usechartify.com/offer1 and usechartify.com/offer2 we also keep your answers in your browser's session storage under chartifyQuiz, so the page can pick up where you left off if it reloads, and under chartifyQuizAds a note of which setup measurements have already been sent, so none is sent twice. Session storage is cleared when you close the tab. chartifyQuiz is needed for the page to work and is never sent anywhere, except that after you buy, the thank-you page adds the market and trading style you picked to the link that opens Chartify (for example &m=crypto&s=swing), so the app opens a matching chart; chartifyQuizAds is only written once you have allowed the advertising pixels.

We also run five third-party advertising pixels on our public marketing pages, and these do set cookies or similar identifiers that the product itself does not need. Advertising and measurement explains what they are, what they send, and how to refuse them.

Separately we count visits with Umami, which sets no cookies and stores nothing in your browser at all. It records the page, the referrer, and a country, browser and device type worked out from your request and then discarded — never a name, an account or a profile, and nothing that follows you to another website. Because it puts nothing on your device it needs no consent, and it runs whatever you choose above; our interest in knowing which pages people actually read is the legal basis for it. We use it to count buttons pressed on these pages too, how many visitors scroll as far as our prices and, on the setup page, which answers are chosen and how far people get. Umami links the events of one visitor using an identifier it calculates from your IP address and browser details together with a secret key it changes regularly; it stores nothing on your device and cannot follow you to other websites.

You can clear or block cookies in your browser settings, but signing in and saving your work will stop functioning if you block the essential ones.

09Advertising and measurement

On our public marketing pages — the home page, the setup page, and the Platform, Chartify AI and AI Painter pages — we run advertising pixels:

  • Meta Pixel, operated by Meta Platforms Ireland Ltd — measures how many people reach us from our ads on Facebook and Instagram, and lets us build audiences for those ads.
  • TikTok Pixel, operated by TikTok Technology Limited — measures how many people reach us from our ads on TikTok, and lets us build audiences for those ads.
  • X Pixel, operated by X Corp. — measures how many people reach us from our ads on X, and lets us build audiences for those ads.
  • Google tag (Google Analytics and Google Ads), operated by Google Ireland Limited and Google LLC — measures how visitors reach and use our marketing pages and how many come from our ads on Google and YouTube, and lets us build audiences for those ads.
  • Whop Pixel, operated by Whop Inc. — attributes a subscription back to the ad or link that sent you, since Whop runs our checkout.

They send those companies your IP address, which of our pages you opened and when, your browser and device details, the page that referred you, and an identifier stored in your browser. Meta and TikTok are also told when you click through to checkout, with the plan and price you chose. X and Google are also told when you complete a subscription, on the thank-you page after checkout: the price and an order number. If you start a free trial instead, only Google is told, on the same page: that a trial started, and an order number. Meta and TikTok may match that against an existing account on their platforms. When you click through to checkout, we also add the campaign tags from the link that brought you to our site (for example utm_source=tiktok) to the Whop checkout link, so Whop can record which campaign led to a subscription; like the pixels, this only happens once they are allowed to run. We do not send them your name, your email address, your journal, or anything you ask the AI.

When you press Start for free, we send you to our app at app.chartify.gg, where you create your account. To that link we add the campaign tags from the link that brought you to our site (for example utm_source=instagram), the page of ours you came from, and that you chose the Free plan, so the app can record which campaign led to your sign-up; these describe the ad or link, not you. Only once the pixels are allowed to run, we also add the ad click identifiers from that link (fbclid, gclid, gbraid, wbraid, twclid, ttclid or msclkid), the identifiers Meta, Google, TikTok and Whop stored in your browser (the _fbc and _fbp cookies, your Google Analytics client ID, the _ttp cookie and Whop's _wuid cookie, which lets Whop's pixel in the app recognise you as the same visitor) and the page that referred you to our site. The app keeps them with your account so we can see which ad or campaign led to your sign-up. Nothing is sent to the advertising platforms in this step.

On the setup pages only the Meta, Google, X and Whop pixels run. On usechartify.com/trial and usechartify.com/offer1 the TikTok Pixel also runs, and only records the page visit; on the other setup pages it does not run. Meta is also told when you start the setup and when you reach your personal summary — never your answers — and we switch off Meta's automatic collection of button clicks on that page, because there the buttons are your answers. On the same page we use the country check described below to show prices including VAT where it applies; the result is kept in the page's memory only.

These pixels run on the marketing pages only. They are not in the signed-in product, and they do not run on this page, the imprint or the terms.

If you are in the EEA, the UK or Switzerland, none of these pixels runs until you say yes. To know whether that applies to you, we check which country your connection comes from. That check is done by Cloudflare, who already carry every request to this site, so it involves no new company and sets nothing in your browser. We ask once, in a banner, the first time you arrive. Refusing is a single click and takes effect immediately — the pages work exactly the same either way, and we will not ask again unless you clear your browser storage. Outside those regions the pixels load with the page; if you are in California, see Your rights for how to opt out.

You can change your mind whenever you like: reopen the choice. You can also block the pixels with your browser's tracking protection or an ad blocker, and limit Meta's use of your data from your Facebook ad preferences, and Google's use of it in your Google ad settings.

Under the CCPA this may count as "sharing" for cross-context behavioural advertising. You can opt out at any time by emailing mail@chartify.gg.

10International transfers

Our service providers may process data outside your country, including outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or an adequacy decision covering the destination country. You can ask us for details of the safeguards that apply.

EmailOctopus is based in the United Kingdom, which the EU recognises as providing adequate data protection, and stores your data on servers in the EU.

11How long we keep it

  • Account data and your content — for as long as your account is open. If you delete your account, we delete or anonymise it within 90 days, except where we must keep something longer by law.
  • Billing and tax records — for the period required by tax and accounting law, typically six to ten years depending on jurisdiction.
  • Technical and security logs — typically up to 12 months.
  • Support correspondence — up to 24 months after the matter is closed.
  • Setup page email list — until you unsubscribe or ask us to delete your address.

Your journal is the thing most likely to matter to you long-term. Export anything you want to keep before closing your account, because deletion is not reversible.

12Your rights

Depending on where you live, you may have the right to: access a copy of your data; correct inaccurate data; delete your data; restrict or object to processing; receive your data in a portable format; and withdraw consent where processing is based on it.

If you are in California, you also have rights to know what personal information we collect and disclose, to request deletion or correction, and not to be discriminated against for exercising those rights. We do not sell personal information for money. The advertising pixels described in Advertising and measurement may amount to "sharing" for cross-context behavioural advertising as the CCPA defines it; that section explains how to opt out.

To exercise any right, email mail@chartify.gg. We will respond within the time the applicable law requires — one month under the GDPR, extendable where a request is complex. We may need to verify your identity first.

13Security

We use encryption in transit, hashed passwords, access controls, and reputable infrastructure providers to protect your data. No system is perfectly secure, and we cannot guarantee absolute security, but we take it seriously and will notify you and any relevant regulator of a personal data breach where the law requires it.

14Children

Chartify is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

15Changes to this policy

We may update this policy. We will change the "last updated" date above, and for material changes we will notify you through the service or by email before they take effect.

16Contact and complaints

For any privacy question or request: mail@chartify.gg
SwiftAlgo UG (haftungsbeschränkt), Rupperather Ring 12, 53902 Bad Münstereifel, Germany

If you are in the EEA or the UK and you think we have handled your data improperly, you have the right to complain to your local data protection authority. We would appreciate the chance to resolve it with you first.