Privacy Policy

1. Overview

Toros Market Intelligence ("Toros", "we", "our") operates the Toros paper trading simulator available at toros.markets. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using Toros, you agree to the practices described in this policy.

2. Information We Collect

We collect only what is necessary to operate the service:

• Google Account information (name, email address, profile photo) provided when you sign in via Google OAuth.
• Account activity data — your simulated trades, portfolio positions, vCash balances, and leaderboard ranking within the platform.
• Payment information for subscription (BEAR/BULL tier) and vCash top-up purchases. Payments are processed by Stripe or Google Play. Toros never sees or stores your card number, billing address, or bank details.
• Device and browser information (IP address, browser type, operating system) collected automatically for security and analytics purposes.

3. How We Use Your Information

Your information is used solely to:

• Authenticate you and maintain your session.
• Display your name and profile on the leaderboard (you can contact us to have this removed).
• Process subscription payments and vCash top-ups.
• Improve the platform and troubleshoot issues.
• Send service-related communications (no marketing emails without explicit consent).

4. Data Storage & Security

Your data is stored on Google Cloud Platform servers located in Toronto, Ontario, Canada (region: northamerica-northeast2). We use industry-standard encryption in transit (TLS) and at rest. Session tokens are short-lived JWTs signed with a secret key that never leaves our servers. We do not sell, rent, or trade your personal information to any third party.

5. Third-Party Services

Toros integrates with the following third parties:

• Google Sign-In — for authentication. Subject to Google's Privacy Policy.
• Stripe — for subscription and payment processing. Subject to Stripe's Privacy Policy.
• Google Play — for in-app purchases on Android. Subject to Google's Privacy Policy.
• Finnhub — for market data. No personal data is shared with Finnhub.
• Cloudflare — for CDN and DDoS protection. Cloudflare processes your IP address per their Privacy Policy.

6. Cookies & Local Storage

On the web version, Toros stores a session token in your browser's localStorage to keep you signed in between visits. This token contains no personal information — only an encrypted identifier. It expires after 30 days or when you sign out. We do not use advertising cookies or tracking pixels.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. To request deletion of your account and all associated data, contact us at legal@toros.markets. We will process your request within 30 days. Canadian users have additional rights under PIPEDA. EU/UK users have rights under GDPR.

8. Children's Privacy

Toros is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us immediately at legal@toros.markets.

9. Changes to This Policy

We may update this policy from time to time. We will notify users of material changes by updating the "Last updated" date above. Continued use of Toros after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions, contact us at legal@toros.markets or through the creator's website at yashjani.biz.