Privacy Policy

Overview

PositEV ("we," "us," or "our") operates the website www.posit-ev.com and the Posit+EV subscription service. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the steps we take to keep it secure.

By using our website or subscribing to our service, you agree to the practices described in this policy. If you do not agree, please discontinue use of the service.

Information We Collect

Information you provide directly:

• Email address — collected at account registration and when you sign up for our free newsletter.
• Payment information — billing details (card number, expiry, CVV) are entered directly into Stripe's hosted checkout. We never see, store, or handle raw card data.
• Support messages — any text you submit through our contact/support form.

Information collected automatically:

• Log data — server logs may record your IP address, browser type, pages visited, and timestamps when you access our service.
• Authentication cookies — we set a short-lived JWT (JSON Web Token) cookie when you log in to keep your session active. This cookie contains your user ID and expiry time only; no sensitive personal data is stored in it.
• Usage data — aggregate, non-identifiable data about how features are used (e.g., which filters are applied on the dashboard) may be collected to improve the service.

How We Use Your Information

• To create and manage your account and verify your identity.
• To process subscription payments and manage billing via Stripe.
• To deliver the daily +EV picks newsletter to subscribers who opt in.
• To respond to support inquiries you submit.
• To detect and prevent fraud, abuse, or unauthorized access.
• To comply with applicable laws and regulations.
• To improve and operate the Posit+EV service.

We do not sell your personal information. We do not use your data for advertising or share it with data brokers.

Information Disclosed to Third Parties

We share your information only with the service providers listed below, and only to the extent necessary for them to perform their specific function.

We may also disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of PositEV or our users.

Method of Disclosure

All data transfers to third-party service providers occur over encrypted HTTPS connections. We do not sell, rent, or trade personal information to any third party for their own marketing purposes. Data is shared programmatically via secure API calls to each provider's infrastructure — no data is transferred via unsecured channels, physical media, or unencrypted email.

Security Practices

• HTTPS / TLS encryption — all traffic between your browser and our servers is encrypted in transit using TLS.
• No card data storage — we never store payment card numbers, CVV codes, or full card details on our servers. All payment data is handled exclusively by Stripe, which is PCI DSS Level 1 certified.
• JWT authentication — session tokens are cryptographically signed and expire automatically. Passwords are hashed using bcrypt before storage.
• Environment variable secrets — API keys and secrets are stored as encrypted environment variables, never hardcoded in source code or exposed publicly.
• Access controls — dashboard and subscriber data is access-controlled; only authenticated, subscribed users can view pick data.
• Minimal data collection — we collect only the information necessary to operate the service.

While we take reasonable precautions to protect your data, no system is completely secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.

Data Retention

We retain your account information for as long as your account is active or as needed to provide the service. If you request deletion of your account, we will remove your personal data within 30 days, except where we are required to retain it by law (e.g., financial records related to transactions).

Newsletter subscribers who unsubscribe will have their email address marked inactive and will no longer receive emails. You may request complete removal at any time.

Your Rights

You may, at any time:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your account and associated data.
• Unsubscribe from the newsletter via the unsubscribe link in any email.
• Cancel your subscription at any time via the Stripe billing portal.

To exercise any of these rights, contact us at the address below.

Cookies

We use one first-party cookie: a session cookie (JWT token) that authenticates your login session. This cookie is strictly necessary for the service to function and does not track you across other websites. We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

Children's Privacy

Posit+EV is intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of the service after any update constitutes your acceptance of the revised policy. We encourage you to review this page periodically.