< wick.network

Privacy Policy

This policy describes what data WICK collects, why, and how it is protected.

1. What We Collect

• Google account info. Name and email address, used for authentication and account identification via Firebase Auth.
• Brokerage API keys. Encrypted with AES-256-GCM before storage. Used exclusively to place trades on your behalf. Never transmitted to third parties. Never used for withdrawals.
• Trading activity. Trade logs generated by the WICK agent on your behalf, stored in Firestore for your dashboard and trade history.
• Login metadata. IP address, user agent, and timestamp for each sign-in. Used for security notifications and fraud detection.
• Onboarding preferences. Your trader profile (role, markets, experience) used to personalize your experience.
• Fuel transactions. Purchase amounts, performance fee deductions, and referral credits logged for billing transparency.
• Newsletter subscription. Email address, stored if you subscribe to The WICK Weekly.

2. What We Do NOT Collect

• We do not collect your brokerage password or login credentials.
• We do not collect payment card numbers.
• We do not collect browser fingerprints or tracking cookies.
• We do not sell or share your personal data with advertisers or third parties.

3. How Data Is Stored

All data is stored in Google Firebase/Firestore with role-based access controls. API keys are encrypted at rest using AES-256-GCM with a server-side encryption key. Data is transmitted over HTTPS exclusively.

4. How Data Is Used

• To execute trades on your connected brokerage accounts.
• To display your trade history, performance metrics, and fuel balance.
• To send security notifications (login alerts, broker connection confirmations).
• To send the weekly newsletter if you opted in.
• To collect performance fees on profitable trades via on-chain USDC transfer.

5. Data Retention

Your data is retained while your account is active. You may request deletion of your account and all associated data by contacting support@wick.network. Trade logs and fuel transactions are retained for 90 days after account deletion for compliance purposes.

6. Third-Party Services

• Firebase (Google). Authentication and database.
• Polygon. On-chain USDC transfers for performance fee collection.
• Resend. Email delivery for notifications and newsletters.
• Vercel. Application hosting.
• Robinhood, Coinbase, Polymarket. Brokerage APIs for trade execution.

7. Your Rights

You may disconnect your brokerage keys, delete your account, or unsubscribe from emails at any time from your dashboard or by contacting support@wick.network.

8. Contact

For privacy questions or data requests: support@wick.network