Privacy Policy
Last updated: February 2026
Holy Trading Science ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform ("the Platform").
1. Information We Collect
We collect the following types of information:
Account Information: When you register, we collect your email address and, if you sign in via Google, your Google profile information (name and email address). This information is stored securely via our authentication provider, Supabase.
Payment Information: When you make a purchase, your payment is processed by Stripe. We do not store your credit card details, bank account information, or other sensitive financial data on our servers. Stripe handles all payment processing in compliance with PCI DSS standards. We retain only your Stripe customer ID and transaction records for account management purposes.
Usage Data: We may collect information about how you access and use the Platform, including your IP address, browser type, pages visited, and time spent on the Platform.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Platform and its features.
- Process payments and manage your membership tier.
- Communicate with you about your account, updates, and support requests.
- Ensure the security and integrity of the Platform.
- Comply with legal obligations.
3. Cookies and Analytics
The Platform uses cookies and similar technologies to maintain your session, remember your preferences, and improve your experience. We may use analytics services to understand how the Platform is used and to improve our services. These analytics tools may collect information about your usage patterns in an aggregated and anonymised form.
4. Third-Party Services
We use the following third-party services to operate the Platform:
- Supabase — Authentication and database services. Your account data is stored securely on Supabase infrastructure.
- Stripe — Payment processing. Stripe handles all financial transactions and is PCI DSS compliant.
- Vercel — Hosting and deployment. The Platform is hosted on Vercel's infrastructure.
Each of these services has its own privacy policy governing how they handle your data. We encourage you to review their respective policies.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. If you request account deletion, we will delete your personal data within a reasonable timeframe, except where we are required by law to retain certain information (such as transaction records for tax purposes).
6. Your Rights
In accordance with the Australian Privacy Act 1988 and, where applicable, the General Data Protection Regulation (GDPR), you have the following rights:
- Access: You have the right to request a copy of the personal information we hold about you.
- Correction: You have the right to request correction of any inaccurate or incomplete personal information.
- Deletion: You have the right to request deletion of your personal information, subject to legal retention requirements.
- Data Portability: You have the right to receive your personal data in a structured, commonly used format.
- Objection: You have the right to object to the processing of your personal information in certain circumstances.
To exercise any of these rights, please contact us using the details below.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
8. International Data Transfers
Your information may be transferred to and processed in countries other than Australia, including where our third-party service providers operate. We ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.
9. Children's Privacy
The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will take steps to delete that information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: hsmsci.com@gmail.com