1. Scope
This Privacy Policy explains how MNA Research LLC ("MNA Research," "we," "us," or "our") collects, uses, discloses, and retains personal information in connection with the Levels by MNA Research website, subscriber account features, and web-based charts and dashboards (Levels Chart, GBS, and Modeled Session).
2. Information We Collect
- Account information: information you provide such as your email address and account credentials. Sign-in is handled by Google Firebase Authentication, which stores your email and a hashed credential on our behalf.
- Subscription and billing information: payment processing is handled by Stripe. We do not receive or store your full payment-card number. We may receive subscription status, plan, transaction identifiers, billing history, and limited billing/customer information from Stripe.
- Login, device, and security information: session cookies, login timestamps, IP address or similar network/device information made available to our servers, and information reasonably needed to authenticate users, maintain sessions, prevent abuse, and secure the Service.
- Support communications: information you choose to provide when you contact us for support, billing, access, privacy, or other account-related requests.
We do not connect to your brokerage account through the Service and do not receive your broker orders, positions, or account balances.
3. Cookies and Similar Technologies
We use cookies or similar technologies that are reasonably necessary for authentication, session management, security, and core site functionality. We do not currently use cookies for behavioral advertising or cross-site advertising tracking.
We use GoatCounter, a self-hosted, cookieless analytics tool, to measure page views and traffic on our public marketing pages. GoatCounter does not use cookies, does not collect personally identifiable information, and does not track you across other websites.
With your consent, given through the cookie banner shown on our public marketing pages, we also use Google Analytics (GA4) to understand how visitors use those pages. Google Analytics uses cookies and may process information such as your IP address (which we configure to be anonymized), browser and device information, and pages viewed. You can decline this at any time through the banner, and your choice is remembered on that device; declining does not affect your ability to sign up for or use the Service. See Google's own privacy policy for how Google Analytics data is handled.
4. How We Use Information
- Provide, authenticate, maintain, and secure your account and subscription.
- Grant, update, and revoke access to the plan you purchased.
- Process subscriptions, billing events, cancellations, and permitted refunds.
- Send transactional or service communications such as password resets, account notices, billing notices, and material service updates.
- Respond to support, legal, privacy, and security requests.
- Detect, investigate, and prevent fraud, credential sharing, unauthorized access, redistribution, abuse, and security incidents.
- Comply with legal, tax, accounting, regulatory, and contractual obligations.
We do not sell personal information for money. We do not currently use personal information for cross-context behavioral advertising.
5. Service Providers and Other Disclosures
We may disclose personal information to service providers and infrastructure providers that help operate the Service, such as Stripe for payments, Google Firebase for sign-in and account emails, hosting and security providers, email-delivery providers, and providers used to deliver website content or fonts. These providers may process information such as account identifiers, email addresses, transaction information, IP addresses, or device/request information as necessary to provide their services.
We may also disclose information when reasonably necessary to comply with law or legal process, protect the rights or safety of MNA Research or others, investigate fraud or misuse, enforce our agreements, or in connection with a merger, financing, acquisition, reorganization, or sale of all or part of the business, subject to applicable law.
6. Retention
We retain personal information for as long as reasonably necessary to provide the Service and for legitimate business purposes such as billing, tax and accounting records, fraud prevention, security, dispute resolution, and legal compliance. Retention periods vary by type of information. Session tokens may expire automatically, while transaction and legal records may be retained longer where required or reasonably necessary.
7. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. Passwords, where stored by us, are hashed rather than stored in plain text. However, no internet service, transmission method, or storage system can be guaranteed to be 100% secure.
8. Your Privacy Choices and Rights
You can accept or decline Google Analytics at any time via the cookie banner on our public marketing pages; clearing your browser's local storage for this site will show the banner again.
You may contact us to request access to, correction of, or deletion of personal information associated with your account. We may need to verify your identity before completing a request, and we may retain information where permitted or required for billing, legal, security, fraud-prevention, or recordkeeping purposes.
Depending on where you live, and whether the applicable privacy law applies to MNA Research, you may have additional statutory rights concerning your personal information. Those rights and any exceptions, verification requirements, or appeal rights are governed by the applicable law. We will not discriminate against you for exercising a privacy right protected by applicable law.
9. Third-Party Services
The Service may link to or depend on third-party services such as Stripe, Google Firebase, and Google Analytics. Their handling of information is governed by their own privacy policies and terms. MNA Research does not control those third-party privacy practices.
10. Children
The Service is intended for adults and is not directed to persons under 18.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised version with an updated date and provide additional notice when required by applicable law.
12. Contact
Questions or privacy requests: [email protected]