Corrada

Privacy Policy (v1.0)

Effective date: August 11, 2026

This Privacy Policy explains how Corrada ("we", "us") collects, uses, and protects information when you use corrada.io and related APIs.

1. Information we collect

Account information

  • Email address
  • Password hash (for email/password accounts) or Google account identifier (for Google SSO)
  • Billing and subscription metadata when you upgrade (via Stripe)

Usage information

  • API call counts and daily usage aggregates (for quotas and billing)
  • Server logs (IP address, timestamps, request paths) for security and debugging

Authentication

  • Session cookies (`corrada_user`) to keep you signed in
  • OAuth state cookies during Google sign-in

We do not intentionally collect portfolio holdings, brokerage credentials, or trade execution data through Corrada's graph API.

2. How we use information

We use your information to:

  • Provide and secure the service
  • Enforce API quotas and plan limits
  • Process payments and send billing-related communications
  • Respond to support requests
  • Improve reliability and prevent abuse

3. Legal basis (where applicable)

Depending on your region, we process data based on contract performance (providing the service), legitimate interests (security, abuse prevention), and consent (where required, e.g. marketing emails if ever offered).

4. Sharing

We share data only with:

  • Infrastructure providers (e.g. hosting, MongoDB Atlas, email delivery) under data processing terms
  • Stripe for payment processing when you subscribe
  • Google when you choose Google SSO (subject to Google's privacy policy)
  • Authorities when required by law

We do not sell your personal information.

5. Retention

We retain account and usage data while your account is active and as needed for legal, billing, and security obligations. You may request account deletion by contacting us.

6. Security

We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, and restricted access to production systems. No method of transmission or storage is 100% secure.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing. Contact us to exercise these rights.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies on the core product.

9. International transfers

If you access Corrada from outside our hosting region, your data may be processed in countries with different data protection laws. We take steps to protect transfers as required.

10. Children

Corrada is not directed at children under 16. We do not knowingly collect data from children.

11. Changes

We may update this Privacy Policy by publishing a new version file (e.g. `privacy-1.1.md`). Material changes may require you to review and accept the updated policy on next login.

12. Contact

Privacy questions: info@mentalok.io

*Corrada is a market relationship research tool for agents — not a trading or investment advisory service.*