Privacy Policy

Last updated: August 3, 2026 · Effective: August 3, 2026

1. Scope

This policy explains what personal information Riley Wolfenden, an individual doing business as CopySmartMoney (“CopySmartMoney,” “we,” “us”), collects when you use copysmartmoney.com, why we collect it, and what control you have over it. It covers our website, accounts, and alerts.

It does not cover the public financial-disclosure filings we publish — those concern public officials and corporate insiders, are public records by law, and are addressed separately in Section 11.

2. What we collect

Information you give us

Information created as you use the Service

Payment information

Payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers. We store only Stripe's non-sensitive reference identifiers — a customer ID, a subscription ID, a price ID, and your subscription status — so we know whether your account is active and at what rate. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

Technical information

Like any website, our hosting provider and infrastructure automatically process your IP address, browser type, and request timestamps in server logs, for security and to deliver the site. We don't use this to build a profile of you.

3. What we don't collect

Stated plainly, because it's unusual enough to be worth saying:

• No card numbers — never transmitted to or stored by us.
• No analytics or tracking — no Google Analytics, no Meta pixel, no advertising SDKs, no session recording, no heatmaps, no fingerprinting.
• No cross-site tracking — we don't know and don't try to learn what you do elsewhere.
• No brokerage or bank connections — we never ask for and cannot access your accounts, positions, or trades.
• No location, contacts, device identifiers, or biometrics.
• No sensitive categories — we don't collect race, health, religion, politics, sexual orientation, or precise geolocation.
• No data purchased from brokers and no advertising profiles.

4. How we use it

We use your information only to:

• Create and authenticate your account and keep you signed in
• Process your subscription and confirm access
• Deliver the alerts and preferences you configured
• Send essential service email (receipts, password resets, security and billing notices, material changes to these policies)
• Send optional newsletters, only if you opted in — unsubscribe any time
• Respond to your support requests
• Protect the Service through rate limiting and abuse prevention
• Comply with law and enforce our Terms

We do not sell, rent, or trade your personal information. We don't share it for advertising or use it to train machine-learning models.

5. Browser storage

We don't use tracking cookies, which is why you don't see a cookie banner. We use a small amount of localStorage on your own device, for functional purposes only:

None of these track you across sites. You can clear them any time in your browser settings; you'll just be signed out and shown the disclaimer again.

6. How long we keep it

7. Who we share it with

We share personal information only with service providers who need it to operate the Service, and only for that purpose. We don't sell it to anyone.

We may also disclose information if legally required (subpoena, court order, lawful request), to protect our rights or someone's safety, or to a successor in a merger or acquisition — in which case we'd notify you first and this policy would continue to apply until replaced.

Our Discord community is operated by Discord under its own terms. Anything you post there is governed by Discord's privacy policy, not this one.

8. Your rights

Regardless of where you live, we offer every user the ability to:

• Access the personal information we hold about you
• Correct anything inaccurate
• Delete your account and associated data
• Export your data in a portable format
• Opt out of non-essential email at any time
• Object to a particular use, or ask us to restrict it

Most of this you can do yourself in your account settings. For anything else, email support@copysmartmoney.com from your account's email address and we'll respond within 45 days. We won't discriminate against you for exercising any of these rights — no price change, no feature removal.

Note that some billing records must be retained for tax purposes even after account deletion, and that deleting your account ends your subscription without a refund (see the Terms).

9. State privacy laws

Several U.S. states have privacy laws whose obligations depend on a business's size, revenue, and how much personal data it handles. Regardless of whether any particular state privacy law applies to us, we voluntarily extend the rights described in Section 8 to every user, wherever you live. That commitment does not change as our business grows.

California residents (CCPA/CPRA). In the past 12 months we have collected the identifiers and internet-activity information described in Section 2. We have not sold or shared personal information as those terms are defined by the CCPA, and we do not process it for cross-context behavioural advertising. We do not knowingly collect data from anyone under 16.

Delaware residents (DPDPA). Delaware's Personal Data Privacy Act took effect January 1, 2026. You may exercise the rights in Section 8, including the right to opt out of targeted advertising, sale, and profiling — none of which we do. If we deny a request, you may appeal by replying to our decision, and you may contact the Delaware Department of Justice if unsatisfied.

Residents of other states with comparable laws may exercise the same rights.

10. Security

Measures currently in place:

• All traffic encrypted in transit over HTTPS
• Passwords stored only as salted hashes, by our authentication provider
• Card data never transmitted to or stored on our systems
• Database-level access controls, so one account cannot read another's data
• Rate limiting and access logging to detect abuse
• A Content Security Policy and related hardening headers on every page
• One active session per account

No system is perfectly secure, and we can't guarantee absolute security. If a breach affects your personal information, we'll notify you and any required regulator as the law requires. Use a strong, unique password.

11. Public officials and insiders in our data

CopySmartMoney publishes financial-disclosure filings concerning members of Congress, senior executive-branch officials, and corporate insiders. That information is public record, published by the U.S. government and the SEC under laws that exist specifically to make it public — the STOCK Act, the Ethics in Government Act, and the Securities Exchange Act.

We report what those filings say. We don't collect private information about these individuals, and this policy governs your personal information as a user of the Service, not the contents of public filings.

If you're named in a filing we publish and believe we've reproduced it inaccurately, contact us and we'll check it against the original source and correct any error on our side.

12. Children

The Service is for adults 18 and over. We don't knowingly collect personal information from anyone under 18. If we learn that we have, we'll delete it. A parent or guardian who believes their child has given us information should contact us.

13. Changes to this policy

We may update this policy. The “Last updated” date above always reflects the current version. For material changes — particularly any change to what we collect or who we share it with — we'll notify you by email or an in-app notice at least 30 days in advance.

14. Contact

Questions, requests, or complaints:

CopySmartMoney
Email: support@copysmartmoney.com

We aim to reply within a few business days and no later than 45 days for a formal privacy request.