How we protect your account and your data

• Sign-in via email & password or Google OAuth.
• Sessions are issued by our managed auth provider and stored client-side as short-lived bearer tokens, automatically refreshed.
• Passwords are hashed by our auth provider; Condara staff never see plaintext passwords.
• You can sign out at any time from the account menu, which clears the local session and cached data.

• Every personal record (your profile, broker connections, holdings, signals favorites, direct messages, AI usage) is protected by row-level security so only you and authorized administrators can read it.
• Cross-user reads (friend search, message participants) only expose a curated set of public profile fields — display name, username, avatar, bio, trading style tags. Email, subscription status, balances, and Stripe identifiers are never visible to other users.
• Direct-message attachments are kept in a private storage bucket; recipients view them via short-lived signed URLs.
• Realtime subscriptions are scoped per user — you cannot subscribe to another user's notifications, friendships, or DM channel.
• Administrative actions require an explicit admin role and are checked server-side on every request.

• Account: email, display name, username, avatar, optional bio and trading-style tags, notification preferences.
• Subscription: Stripe customer / subscription / price IDs, plan and access status (no card numbers — Stripe handles payment data).
• Trading content you create: watchlists, journal entries, holdings, broker connections (credentials stored encrypted at rest by our database provider), and AI usage counters.
• Social: friendships and direct messages with other Condara users.

We do not sell your personal data and we do not share it with advertisers.

• The app runs on Lovable Cloud (Cloudflare Workers edge runtime) for the web front end and server functions.
• The database, authentication, file storage, and realtime subsystems are managed Supabase services with encryption in transit (TLS) and at rest.
• Server-only secrets — Stripe keys, broker API tokens, AI provider keys — are stored in the platform secret store and are never shipped to the browser.

• Stripe — subscription billing and payment processing.
• Supabase — managed Postgres, auth, storage, realtime.
• Cloudflare — edge hosting and CDN via Lovable.
• MetaApi — bridge for connected MT5 trading accounts (only when you opt in by adding a broker connection).
• OpenAI / Lovable AI Gateway — model inference for AI features.
• Twelve Data / Finnhub — market data feeds.
• Telegram — optional signal notifications (only when you opt in).
• Google — optional OAuth sign-in.

• You can edit your profile, change your notification preferences, and disconnect broker accounts at any time from Settings.
• You can clear a direct-message conversation from the chat header; this permanently deletes those messages for both participants.
• To request a full account deletion or a copy of your data, contact us at the address below and we will action the request.

If you believe you have found a vulnerability or are concerned about how your data is handled, please email security@condaramarkets.com. Please include steps to reproduce and avoid accessing other users' data while investigating. We will acknowledge your report and follow up with a remediation plan.