Privacy Policy
Last updated: 30 September 2026
This policy explains what personal data OZCx (ozcxai.com), operated by Hamza Özcan, collects when you use the website and the trading terminal, why, who processes it, and the rights you have. Contact: info@ozcxai.com.
What we collect
- Account data — your name, email address and a one-way hash of your password (we never store the password itself). If you sign in with Google, we receive your name and verified email address from Google.
- What you save in the terminal — watchlists, price alerts, portfolio positions you enter, display preferences, your Trader Chat nickname and the messages you post there.
- Usage data — which terminal screens you open and how many AI analyses you run per day (used to enforce plan limits), plus standard server logs (IP address, time, requested path) kept for security and rate limiting.
- Billing data — if you subscribe, the payment is taken by Polar (see below). We receive your plan, subscription status, renewal dates and payment receipts; we never receive or store your card details.
How we use it
- To create and secure your account and keep you signed in.
- To provide the features of your plan and enforce its limits.
- To send account emails (password reset, subscription and renewal notices). We do not send marketing email without your consent.
- To protect the service against abuse (rate limiting, fraud prevention).
We do not sell your personal data and do not use it for advertising.
Who processes it
- Cloudflare — hosts and delivers the website.
- Contabo — hosts our application server and database (European Union).
- Polar (polar.sh) — merchant of record for subscriptions: processes payments, taxes, invoices and receipts.
- Google — optional Google sign-in, and our business email.
- Anthropic — when you request an AI analysis, the question and the market data it needs are sent to Anthropic's API to generate the answer. Your email and password are not sent.
Cookies and local storage
We do not use advertising or tracking cookies. The terminal stores your session token and display preferences in your browser's local storage so you stay signed in. Payment and Google sign-in pages are provided by those services and are subject to their own policies.
How long we keep it
Account data is kept while your account exists. When you delete your account (Settings → Danger zone), your account and the data listed above are deleted. Payment records are retained by Polar as required by tax law. Server logs are kept for a limited period for security.
Your rights
Under the Turkish Personal Data Protection Law (KVKK) and, where applicable, the EU GDPR, you can ask to access, correct, export or delete your personal data, or object to its processing. Most of this you can do yourself in Settings; for anything else, email info@ozcxai.com and we will respond within 30 days.
Security
Connections are encrypted (HTTPS), passwords are stored only as salted hashes, and access to the servers is restricted to key-based administrator access.
Changes
If we change this policy we will update the date above, and notify account holders by email of any material change.