BijuuFlow
Privacy Policy
BijuuFlow ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, and how we use it. By using the Service you agree to this policy.
Chrome Extension Privacy Policy
The BijuuFlow TradingView Sync Chrome extension has a separate privacy policy covering extension login tokens and Gamma Grid syncing. Read it here: BijuuFlow TradingView Sync Extension Privacy Policy.
1. What We Collect
| Data | Why we collect it | When |
|---|---|---|
| Account identifier | Account creation, login, and service communications | On sign-up |
| Username | Display name within the Service; must not contain personal identifying info | On sign-up |
| Password (hashed) | Authentication. We store a one-way hash only — we cannot read your password | On sign-up / password change |
| Invite code | Linking your account to the access grant provided during registration | On sign-up |
| Usage activity | Which features you use (dashboard views, AI runs, exports) — no content is stored, only event type and timestamp | During use |
| IP address | Rate limiting on authentication endpoints (retained only as needed for security and abuse prevention) | During login / sign-up |
We do not collect your trading positions, portfolio, brokerage details, or any financial account information. The market analytics displayed on the dashboard are provided as part of the Service and are not tied to your personal account activity.
2. How We Use Your Data
- To create and manage your account and authenticate your sessions;
- To send important account communications — no marketing without consent;
- To monitor usage at an aggregate level so we can improve the Service;
- To detect and prevent abuse, fraud, or violations of our Terms of Service.
3. Third-Party Services
| Provider | Purpose | Data shared |
|---|---|---|
| Subscription provider | Billing and payment processing | Account billing details only; we do not see your card information |
| AI service provider | AI-assisted commentary features | Service-related analytics data only; no personal information is shared |
We do not sell, rent, or share your personal information with any other third parties.
4. Data Storage and Security
Account data is stored securely on our servers. Passwords are protected with one-way cryptographic hashing. Sessions are signed with a server-side secret key. We apply industry-standard security practices including HTTPS, rate limiting, and CSRF protection.
While we take reasonable precautions, no method of internet transmission or storage is 100% secure. We cannot guarantee absolute security.
5. Data Retention
We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law. Usage log records older than 12 months may be purged periodically.
6. Your Rights
Under the Australian Privacy Act 1988 (and applicable regulations), you have the right to:
- Access the personal information we hold about you;
- Request correction of inaccurate information;
- Request deletion of your account and personal data;
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your data.
To exercise any of these rights, contact us at the address below.
7. Cookies and Local Storage
We use a single session cookie (HttpOnly, SameSite=Lax) to keep you signed in. We do not use advertising or tracking cookies. Some dashboard preferences (alerts, sound settings) are stored in your browser's localStorage and never transmitted to our servers.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify active subscribers of material changes through the Service. Continued use of the Service after changes constitutes acceptance of the updated policy.
9. Contact
For privacy-related enquiries or requests, use the support channel available in the Service. We aim to respond within 5 business days.