Privacy Policy & Non-Custodial Software Boundary.

SECTION 01

Custody & Exchange Access

Zero custody, zero private keys, and zero automated order execution.

Striv never holds, pools, stakes, transmits, or settles fiat currency, digital assets, or commodity/Treasury reserve instruments. The platform never collects exchange withdrawal secrets, order-routing API keys, or wallet seed phrases, and never executes on-chain transactions or brokerage orders. Clicking Confirm & Log to Journal writes only to your private journal ledger.

SECTION 02

International Legal Boundary

Impersonal technical analysis—distinct from fiduciary financial advice.

Automated market-structure detectors (support and resistance shelves, USD Volume Profile Point of Control, Log/Linear Fibonacci, Fair Value Gaps), technical indicator scanners, and macro calendars generate standardized chart visualizations requested directly by the user. Aligned with international software distinctions (US SEC/CFTC publisher exclusions for impersonal tools, EU MiCA non-CASP software boundaries, UK FCA non-advisory tooling, and MAS analytical exclusions), outputs never constitute personalized investment advice, solicitation, or broker intermediation. Leveraged derivatives carry high risk of capital loss, and you remain solely responsible for local compliance.

SECTION 03

Data Collection & Isolation

Account credentials, scoped Portfolio Books, and workspace isolation.

We process minimum workspace data needed to operate your account: authentication credentials (email and securely hashed passwords), multi-tenant Portfolio Books, manual/CSV trade records, asset lot tracking, user notes, up to 5 custom Copilot strategy presets, and AI credit consumption logs. Database queries enforce strict tenant row isolation across workspaces, while Prompt Shield fences custom user strategy rules against cross-tenant or prompt-injection exposure.

SECTION 04

Ephemeral Vision OCR

Client-side EXIF stripping, Zero Data Retention routing, and zero disk storage.

Trade screenshots uploaded to Vision OCR are resized inside your browser (max 1280px JPEG) so camera and device EXIF metadata are stripped prior to upload. Server-side validation checks image binary headers, blocks oversized files above 25 megapixels, re-encodes pixels cleanly in memory, routes extraction through Zero Data Retention inference endpoints configured with data collection and model training disabled, and clears memory immediately afterward without saving receipt files to disk.

SECTION 05

Payments & Global Tax

Subscriptions processed via Whop as Merchant of Record.

Paid subscriptions, card verification, local VAT/GST/sales tax calculation, and statutory invoicing across international jurisdictions are processed directly by Whop as our Merchant of Record. Striv never stores raw payment card numbers or CVV codes on application servers and retains only subscription status identifiers synced by verified billing webhooks. Users remain solely responsible for statutory income or capital gains tax reporting using their exported CSV trade logs.

SECTION 06

GDPR, UK GDPR & CCPA Rights

Right to access, portable CSV export, correction, and permanent erasure.

Consistent with international privacy principles (including EU GDPR, UK GDPR, and California CCPA/CPRA), Striv does not sell personal data or trade logs to third-party brokers or ad networks. Workspace owners can inspect or modify records anytime, export full journal history in CSV format, delete individual buckets or fills directly inside the workspace, or request full account and tenant data erasure through the Support Portal (/support) or by emailing support@usestriv.com.