Privacy Policy

Last updated: September 28, 2026

1. Who We Are

Chesterfield Flow ("we," "our," or "us") operates chesterfieldflow.com, an options-flow data and analytics service. This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. Questions go to support@chesterfieldflow.com.

2. Information We Collect

• Account and billing information. The email address you enter at checkout or on the login page, your Stripe customer ID, and your subscription plan and status. You enter payment card details on Stripe's checkout page. Stripe processes them; we never receive or store your full card number.
• Login links. When you request a login link, we store a hashed one-time token with your email address. The link expires after 15 minutes, works once, and the token is deleted shortly after it expires.
• Session cookie. An encrypted cookie keeps you signed in. The service cannot work without it.
• Analytics. We use Google Analytics (through Google Tag Manager) to understand how the site is used. It uses cookies and collects information such as pages viewed, referring site, device and browser type, and approximate location derived from your IP address.
• Server logs. Our servers record IP address, time, and the pages or data requested, for security and troubleshooting.
• Messages you send us. If you email support, we keep the message and your email address to answer it.

We do not collect phone numbers, postal addresses, or government identifiers.

3. How We Use Information

• To give you access to the service and confirm that your subscription is active.
• To send login links and service emails, such as billing or account notices.
• To process payments, trials, renewals, and cancellations through Stripe.
• To answer support requests.
• To protect the service, prevent abuse and account sharing, and fix technical problems.
• To understand overall site usage and improve the service.
• To meet legal, tax, and accounting obligations.

4. Service Providers

We share personal information only with providers that help us run the service:

• Stripe - payments, subscriptions, and the billing portal (stripe.com/privacy).
• Proton - sends login and support email.
• DigitalOcean - hosts our servers.
• Google - website analytics (policies.google.com/privacy).

We may also disclose information when the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of the business.

5. No Sale of Personal Information

We do not sell your personal information. We use analytics to measure how the site is used, not to target advertising to you.

6. How Long We Keep Information

• Account and billing records: while you are a customer, and afterward as long as tax and accounting law requires.
• Login tokens: deleted shortly after they expire (about 30 minutes).
• Server logs: kept only as long as needed for security and troubleshooting.
• Analytics data: kept under Google Analytics' retention settings.

7. Security

We use HTTPS, encrypted session cookies, hashed login tokens, and restricted server access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your Choices and Rights

You can ask us to give you a copy of, correct, or delete your personal information. You can block or delete cookies in your browser, or use Google's opt-out add-on (tools.google.com/dlpage/gaoptout) to stop Google Analytics. Blocking the session cookie signs you out.

9. California Residents

If you live in California, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to:

• Know the categories and specific pieces of personal information we collect, use, and disclose.
• Delete personal information we collected from you, subject to legal exceptions.
• Correct inaccurate personal information.
• Not be discriminated against for using these rights.

We do not sell or share personal information as those terms are defined in the law. The categories we collect are identifiers (email address, IP address), commercial information (subscription and payment status), and internet activity (analytics and server logs), for the purposes in Section 3.

To make a request, email support@chesterfieldflow.com from the email address on your account. We confirm your identity by email and respond within 45 days. You may use an authorized agent; we may ask for proof that the agent has your permission.

10. Children

The service is for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

11. Where Data Is Processed

We and our providers process data in the United States.

12. Changes to This Policy

When we change this policy, we update the date at the top. If a change is material, we also email active subscribers before it takes effect.

13. Contact Us

Chesterfield Flow, support@chesterfieldflow.com