Legal

Privacy Policy

Last updated: 5 November 2026

This policy is a starting template. Have it reviewed for the laws that apply to you and your users (for example GDPR or Sri Lanka's Personal Data Protection Act).

Information we collect

Signing in with Google or Facebook

If you choose “Continue with Google” or “Continue with Facebook”, we receive your name, email address (if you share it), profile photo and an account ID from that service. We use them only to create and sign in to your Greenback Terminal account. We never get your Google or Facebook password and we never post on your behalf. You can disconnect these services in Settings → Account.

How we use it

To provide and secure the service, keep you signed in, sync your workspace, show your public profile and content, send account emails (verification, password reset, important notices), respond to messages, moderate content and prevent abuse.

Cookies and local storage

We use one essential session cookie to keep you signed in, and your browser's local storage to save your workspace and settings. We do not use advertising cookies. Our hosting provider may set a security cookie to protect the site from bots.

Sharing

We do not sell your personal information. We share data only with service providers needed to run the site (hosting, email delivery, market-data providers), when required by law, or to protect our users and the service. Your public profile and published content are visible to everyone.

Deleting your data

To delete your account and all data we hold about you (including data received from Google or Facebook): sign in, open Settings → Delete account and confirm. Everything is removed immediately. If you cannot sign in, contact us from the email on your account and we will delete it within 30 days. You can also remove our app from your Facebook account under Facebook Settings → Apps and Websites.

Retention

We keep your data while your account is active. You can delete your account at any time in Settings → Delete account; this removes your profile, ideas, comments, follows and workspace data. Backups are overwritten in the normal course of operations.

Your rights

You can view and edit your profile, download your workspace data, and delete your account from Settings. To request access to or correction of other information, contact us.

Security

Passwords are hashed, sessions are protected against cross-site request forgery, uploaded images are re-encoded, and access to administration is restricted. No method of transmission or storage is completely secure.

Children

The service is not intended for anyone under 18.

Changes

We will post any changes to this policy on this page.