HeatPrivacy Policy
HeatCharting is a charting and order-flow platform made by tws. This page explains what personal data we collect, why, who we share it with and the choices you have. We keep it short and we do not sell your data.
1. What we collect
- Account details: your name, username and email address. Your password is stored only as a one-way scrypt hash; we cannot see it.
- Security data: the one-time codes we email you, and, if you turn on two-factor authentication, your authenticator secret and hashed backup codes.
- Profile and community content: the bio, avatar, links and markets you add, plus the ideas, messages, direct messages, likes and scripts you post or publish.
- Your workspace, if you back it up: layouts, watchlists, drawings, Pine scripts and trade-journal entries you choose to save to the cloud. Without backup, these stay in your browser only.
- Alerts: the alerts you create and a record of when they fired.
- Plan and billing: your country of residence, any partner-broker account ID you link, whether that account shows recent trading (from the broker's partner report), and the status of crypto payments. We never receive card or bank details; crypto payments are handled by our payment processor.
- Technical data: your IP address and basic request information, used for security, rate limiting and fraud prevention, and one session cookie that keeps you signed in.
2. How we use it
- To run your account, confirm your email address and keep your account secure.
- To provide charts, alerts, community features, script publishing and cloud backup.
- To give you the plan you are entitled to: trial, paid plan, or free access through a partner broker.
- To send service emails such as sign-up codes, password resets, security notices and plan reminders. We do not send marketing emails without your consent.
- To prevent abuse, investigate problems and meet legal obligations.
3. Who we share it with
We share only what each service needs to work:
- Hosting: the server provider that stores HeatCharting's data.
- Email delivery: the provider that sends our codes and notices.
- Payments: our crypto payment processor receives the order amount and an order reference.
- Partner brokers: if you link a broker account, we match the account ID you entered against the broker's partner report to confirm activity. We do not send brokers your email or profile.
- Other members: your public profile, ideas, community messages and published scripts are visible to other members. Direct messages are visible only to the people in the conversation.
- Authorities: when the law requires it.
4. Cookies and local storage
We use one essential cookie, hc_sess, to keep you signed in. Your chart settings, layouts and journal are kept in your browser's local storage. We do not use advertising or cross-site tracking cookies.
5. How long we keep it
- Account data is kept while your account is open.
- When you delete your account, your profile, notifications and backups are removed. Community messages you posted stay but show as from a deleted user.
- Payment records may be kept longer where tax or accounting law requires it.
- Unused email codes expire after 10 minutes.
6. Your choices and rights
You can see and edit your profile at any time, change your password, turn on two-factor authentication, and delete your account from Account & security. You can also ask us for a copy of your data, to correct it, or to delete it, and you can withdraw consent at any time. Depending on where you live, laws such as India's Digital Personal Data Protection Act or the EU GDPR give you these rights.
Write to our privacy contact. We aim to reply within 7 days.
7. Security
We use HTTPS, hashed passwords, email confirmation, optional two-factor authentication, HttpOnly session cookies and rate limits. No system is perfectly secure, so please use a strong, unique password and turn on two-factor authentication.
8. Age
HeatCharting is meant for people aged 18 and over. We do not knowingly collect data from children.
9. International transfers
Our servers and service providers may be located outside your country. When we move data across borders we use providers that protect it to a comparable standard.
10. Changes
If we change this policy in a meaningful way we will update the date above and let signed-in members know in the app.