Privacy Policy

This policy explains what personal information Viterbi ("we", "us") collects, why, and what your choices are. We have tried to write it in plain English. If anything is unclear, email [CONTACT_EMAIL].

What we collect

Account information. When you register with email and password, we store your email address and a hashed version of your password. We never store your password in plain text.

Google sign-in. If you sign in with Google, Google shares your name, email address, and profile picture with us. We use that information only to create and run your Viterbi account. We do not share it with anyone else, and we do not use it for advertising or to train machine learning models. We do not receive your Google password.

Files you upload. Strategy CSV files you import are stored so we can run analyses and show them back to you. These files may contain your trading history. We treat them as private content: we do not share them, sell them, or use them for anything other than operating Viterbi for you.

Payment information. If you subscribe to a paid plan, payment is handled by Stripe. Stripe collects your card details directly; we never see or store your full card number. If you subscribe, we store the identifiers Stripe gives us, such as a customer ID and subscription status, so we know which plan your account is on. Stripe processes your payment data under its own privacy policy.

Session cookie. We set a cookie that keeps you signed in. It is strictly necessary for the service to work. We do not use advertising or tracking cookies, and we do not currently run third-party analytics. Stripe may set its own cookies during checkout to process the payment and prevent fraud.

Technical logs. Our hosting provider automatically records basic request data, such as IP address and browser type, for security and reliability.

What we do with it

We use your information to operate Viterbi: authenticating you, storing your imports, running the analyses you request, billing you if you are on a paid plan, and keeping the service secure. We do not sell personal information. We do not use your data for advertising. We do not use your content to train machine learning models.

For users in jurisdictions that require a legal basis for processing, ours are: performing our contract with you (providing and billing for the service you signed up for), our legitimate interest in keeping the service secure and functioning, our legal obligation to keep payment and tax records, and your consent where you have given it, which you may withdraw.

Who we share it with

We share personal information only with the providers who run the service for us: our hosting provider, our database provider, Google (if you choose Google sign-in), and Stripe (if you subscribe). Each handles the data for the specific purpose described here. We may also disclose information if the law requires it.

Where your data lives

Viterbi runs on infrastructure in the United States. Our database is hosted by Neon (US West, Oregon) and the application is hosted by Vercel (US). If you use Viterbi from outside the United States, including from Canada or the European Economic Area, your information is transferred to and stored in the United States. Our infrastructure providers publish data processing terms that include recognized transfer safeguards; the practical summary is that your data is processed in the US by providers under contractual privacy obligations.

How long we keep it

We keep your account data and uploads while your account exists. To delete your account and all associated data, email [CONTACT_EMAIL] from the address on the account. We will delete your data within 30 days of verifying the request. An in-app deletion control is planned; until it ships, email is the mechanism.

We keep basic records of payments for as long as tax and accounting law requires, even after an account is deleted. Those records do not include your card number.

Security

Connections to Viterbi use TLS encryption in transit. Our database provider encrypts data at rest. Passwords are stored only as hashes. No system is perfectly secure, and we cannot promise absolute security, but we take reasonable measures appropriate to a service of this size.

Your rights

Canada (PIPEDA). You may request access to the personal information we hold about you, ask us to correct it, and withdraw consent to its use, subject to legal limits. You may also complain to the Office of the Privacy Commissioner of Canada.

European Economic Area and United Kingdom (GDPR and UK GDPR). You may request access, correction, deletion, restriction of processing, and a portable copy of your data, and you may object to processing based on legitimate interests. You may complain to your local supervisory authority.

Everywhere. Exercise any of these rights by emailing [CONTACT_EMAIL]. We will respond within 30 days. We will never discriminate against you for exercising a privacy right.

Children

Viterbi is not directed at anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe a minor has created an account, email [CONTACT_EMAIL] and we will delete it.

Changes

If we change this policy in a material way, we will update the date above and post the new version here before it takes effect.

Contact

Privacy questions and requests: [CONTACT_EMAIL]