Privacy Policy

StockMates is a trading name of Intelitrade Ltd ("we", "us", "our") (company registration number 17447548), registered at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Intelitrade Ltd is the data controller for the personal information described in this policy.

stockmates.co is a fantasy stock trading game: you configure an AI trading agent ("Leo") that trades a virtual portfolio on your behalf in one or more games, using real market data but no real money at stake unless you win a cash prize. This policy describes the data we collect to run that service, including your account, your virtual trading activity, and — for winners — the payout details needed to pay out a cash prize.

Your AI Mate's trading decisions are generated automatically (see Data Sharing, below) and directly determine your leaderboard position and eligibility for a cash prize — the trades your Mate makes are not reviewed or approved by a person before they're applied to your portfolio.

We collect the following categories of personal information:

• Account information — your name, email address, and password (stored securely by our authentication provider, Google Firebase Authentication — we never see or store your raw password).
• Game and trading activity — which games you've joined, your AI Mate's configuration (aggressiveness, risk tolerance, position size, stop loss, take profit, sector focus), your virtual portfolio's positions, cash balance, and trade history within each game.
• Subscription and payment data — your subscription tier (Rookie, Player, or All-Access) and billing status. Card payment details themselves are handled by our payment processor and are never stored on our own servers.
• Payout details — if you win a cash prize, the bank details or PayPal email address you submit from your Account page in order to receive your winnings.
• ID verification documents — if you request a cash-out, the passport or driving licence image you upload for identity verification (see our Terms of Use, Section 8). These documents are reviewed manually by the small team responsible for approving payouts, retained for 6 years after review for fraud-prevention and audit purposes in line with standard UK financial record-keeping practice, and access is restricted to that team.
• Technical data — IP address, browser type, device information, and general usage behaviour on our site, collected automatically as you use the Services.

We use the personal information we collect for the following purposes, each with the lawful basis shown under UK data protection law:

• Creating and running your account and games — including having your AI Mate make trading decisions on your behalf and updating your portfolio and the leaderboard accordingly. Lawful basis: contract (necessary to provide the Services you signed up for).
• Processing subscription payments and applying the correct game-access benefits for your tier. Lawful basis: contract.
• Verifying and paying out cash prizes you've won, including anti-fraud checks on payout requests. Lawful basis: contract and legal obligation (our financial and anti-fraud record-keeping duties).
• Sending transactional emails about your account and games, such as trade notifications, game start reminders, and prize confirmations. Lawful basis: contract.
• Sending optional marketing updates about StockMates. Lawful basis: consent — only where you've given it. You may withdraw this consent at any time by contacting us at legals@stockmates.co, or by managing your notification preferences from your Account page.

We do not sell your personal data. We share it only with the following categories of trusted third-party providers, solely to deliver the Services:

• Google Firebase (Google Cloud) — hosts our application, database, authentication, and file storage.
• Anthropic — your AI Mate's trading decisions are generated by Anthropic's Claude AI model. To do this, we send Anthropic the trading-relevant data needed to make a decision (your Mate's configuration, your portfolio's current state, and relevant market data) — we do not send Anthropic your name, email address, or payout details.
• Alpaca — provides the real market price data used to run each game.
• Payment processing providers — process subscription payments; they receive your card details directly and we never store them ourselves.
• Sentry — error-monitoring, used to detect and fix bugs in the Services.
• Contentsquare — website analytics, used to understand how visitors use our site so we can improve it.

We may also disclose personal data where required by law, for example to comply with a court order or to prevent fraud.

Some of the providers listed in Data Sharing, above, process personal data outside the UK and European Economic Area (EEA). Where this happens, we put in place a recognised legal safeguard before any transfer takes place.

• Anthropic is based in the United States. Data sent to Anthropic to generate your AI Mate's trading decisions is transferred under the UK International Data Transfer Agreement (IDTA), or the UK-approved Addendum to the EU Standard Contractual Clauses (SCCs), as appropriate.

Where a future provider we use is based outside the UK/EEA, we will update this section to name them and the safeguard used before any such transfer begins.

We take the security of your personal data seriously and have put in place appropriate technical and organisational measures to protect it from unauthorised access, loss, misuse, or disclosure. Our services are hosted on Google Firebase's secure infrastructure, and sensitive data is encrypted both in transit and at rest.

Whilst we take all reasonable steps to safeguard your data, no system is entirely free from risk. If you believe your data has been compromised in any way, please contact us immediately at legals@stockmates.co.

We retain different categories of data for the following specific periods:

• Account and trading data — retained for as long as your account remains active.
• Payout records and ID verification documents — retained for 6 years after the payout or verification, for our financial, tax, and fraud-prevention record-keeping obligations, even after a game has ended or your account is deactivated.
• All other personal data — permanently deleted immediately upon account deactivation (see Your Rights, below).

Under UK data protection law, you have a number of rights in relation to your personal data. You have the right to access the information we hold about you, to have any inaccuracies corrected, and to request deletion of your data where there is no compelling reason for us to continue holding it.

You also have the right to restrict or object to how we process your data, and to request that we transfer your information to another organisation. To exercise any of these rights, please contact us at legals@stockmates.co. If you are not satisfied with our response, you have the right to raise a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

You can exercise your right to erasure yourself at any time by deactivating your account from the Danger Zone section of your Profile page — this permanently deletes your personal data and signs you out of every device immediately, without needing to contact us first. If you also hold a paid subscription plan, deactivating moves you onto the free Rookie plan and cancels that subscription for the following month, on the same basis as cancelling directly from your Plans page — see our Refund & Cancellation Policy for how that interacts with any payment already made for your current period.

We may update this Privacy Policy from time to time to reflect changes in the law, our business practices, or the services we offer. When we do so, we will revise the date shown at the top of this page.

We encourage you to review this policy periodically. Where changes are significant, we will make reasonable efforts to notify you directly.