Privacy Policy

This policy is written with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Commission's (NDPC) guidance in mind, since StocktoWealth's audience is primarily based in Nigeria. It also aims to be a reasonable baseline for users elsewhere.

1. Data Controller

StocktoWealth is the data controller for information collected through StocktoWealth. Contact: support@stocktowealth.com.

2. What We Collect

• Account information: name, email address, hashed password
• Trading activity: simulated orders, holdings, portfolio history, journal entries
• Payment information: for Pro subscriptions, Paystack processes and stores your card details directly — StocktoWealth never receives or stores your card number
• Usage data: login timestamps, IP address (for security/fraud prevention), device/browser information

3. Why We Collect It (Lawful Basis)

• Contractual necessity — to provide the account and trading simulation you signed up for
• Legitimate interest — to secure accounts, prevent abuse, and improve the platform
• Consent — for optional communications like challenge reminders and price alerts, which you can opt out of

4. Who We Share Data With

We use the following third-party processors, each bound by their own privacy/security obligations:

• Paystack — payment processing for Pro subscriptions

We do not sell personal data to advertisers or third parties.

5. Your Rights Under the NDPA

As a data subject, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Request a copy of your data in a portable format
• Withdraw consent for optional communications at any time
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data has been mishandled

To exercise any of these rights, contact support@stocktowealth.com.

6. Data Retention

We retain account and trading data for as long as your account is active. If you delete your account, we remove personal identifying information within 30 days, except where retention is required for legal, tax, or fraud-prevention purposes (e.g. payment transaction records).

7. Security

Passwords are hashed, not stored in plain text. Payment card details are handled entirely by Paystack and never touch our servers. We use standard safeguards (encrypted connections, access controls) to protect your data, though no system can guarantee absolute security.

8. Data Breach Notification

In the event of a data breach likely to result in risk to your rights, we will notify affected users and the NDPC in accordance with NDPA requirements.

9. Children's Privacy

StocktoWealth is not directed at children under 18 and we do not knowingly collect data from users under that age.

10. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or an in-app notice before they take effect.