Service delivery
We process required account and workspace data to provide chart tools, alerts, replay, and paper-trading analytics.
Privacy Policy
How CosmicX handles your information
CosmicX is focused on research education and paper trading. We apply data minimization, secure handling controls, and clear disclosure standards.
Last updated: April 2026
1. Data categories we process
We collect only the information required to provide product features, account support, and service safety.
| Category | Examples | Purpose |
|---|---|---|
| Account details | Email address, account identifiers, support history | Authentication, account maintenance, customer support |
| Workspace content | Watchlists, alerts, notes, journal entries, paper trades | Core functionality and progress continuity |
| Diagnostics | Crash logs, device metadata, app version, latency signals | Performance monitoring and reliability improvements |
| Communication records | Messages sent through support forms and email | Issue resolution, legal follow-up, and audit traceability |
2. Legal bases and use of information
Legitimate interests
We process diagnostics and abuse signals to secure the platform, prevent misuse, and maintain service integrity.
Consent-based actions
Where required by law, optional communications and specific processing actions are based on your consent.
Legal obligations
Some records may be retained or disclosed to meet legal, regulatory, accounting, or dispute requirements.
3. Sharing and third-party processors
- Infrastructure providers process data on our behalf under confidentiality and security obligations.
- Market data providers supply chart and context feeds. Their own data policies apply to source delivery layers.
- Support tooling providers may process contact messages for ticket routing and response tracking.
- We do not sell personal information and we do not provide ad-network profiling access.
Disclosure exceptions
We may disclose limited data when required by law, court order, valid regulatory request, or to protect service security.
4. Retention and deletion
| Record type | Typical retention | Deletion trigger |
|---|---|---|
| Account profile data | Until account closure | User deletion request and legal hold checks |
| Journal and paper-trading records | Until user removes content | User action or full account deletion workflow |
| Support requests | Up to 24 months | Retention cycle expiry or legal requirement completion |
| Security logs | 30 to 180 days | Automated log rotation and archive expiration |
5. User rights and choices
- 1Request access to a copy of personal data linked to your account.
- 2Request correction for inaccurate profile or support information.
- 3Request deletion of your account data, subject to legal and security retention limits.
- 4Object to or restrict certain processing where regional law grants that right.
6. Security, transfers, and policy changes
Security measures
We use encrypted transport, role-based access controls, and monitoring practices to protect account-related information.
International processing
Data may be processed in jurisdictions where our processors operate, using contractual and technical safeguards.
Children's privacy
CosmicX is not directed to children under 13. If identified, child data is removed according to applicable law.
Policy updates
Material privacy changes are posted in-app and on this page with a revised "Last updated" date.