Golden Path Strategies respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our website and services, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Information We Collect

We collect personal information that you voluntarily provide to us when you:

Buy a plan on Whop.
Sign in with Whop (Whop then shares your Whop user ID, e-mail address, display name, and plan status with us).
Save portfolios, bookmarks, or alerts, or send us feedback in the app.
Ask for a data link to download or delete your data.
Contact us via email at support@goldenpathstrategies.io.

You can view the free part of the Service without giving us any personal information.

The personal information we collect may include:

Contact information: Your name and email address.
Account information: your Whop user ID, the e-mail address and display name on your Whop account, your plan status (which plan, whether it is active), and your saved display preferences.
Sign-in records: sign-in sessions and one-time sign-in or data links (stored only in hashed form).
Payment information: We do not store or process your payment card details directly. All payments are handled securely by our payment processor, Whop. We only receive confirmation of payment and subscription status from Whop.
Usage data: Information about how you interact with our website, including IP address, browser type, the pages requested and when. This is collected via standard server logs.
Content you create in the Service: your portfolios, bookmarks, alerts, the descriptions you add to alerts, the e-mail address alerts are sent to, and feedback you send us.
Error reports: when the app breaks in your browser, it sends us the error message, the page address, your browser type and, if you are signed in, your account number, so we can fix the problem. It contains no portfolio content or passwords.

2. How We Use Your Information

We use the information we collect to:

Check your plan and give you access to the paid features of the Service (including the nightly check that signs out members whose plan has ended).
Store your portfolios, bookmarks, and alerts, and send the alert e-mails you set up.
Send you a data link when you ask for one.
Manage your subscription, including renewals, cancellations, and billing inquiries.
Communicate with you about your account, updates to our products, and customer support requests.
Send marketing communications (only if you have opted in; we do not currently send any).
Improve our website, products, and services based on usage patterns and feedback.
Comply with legal obligations and protect our rights.

3. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

Contractual necessity: Processing is necessary to fulfill our contract with you (providing the paid features and alerts of your plan).
Legitimate interests: Processing is necessary for our legitimate business interests, such as improving our services and preventing fraud, provided these interests do not override your fundamental rights.
Consent: For marketing communications, we rely on your explicit consent, which you can withdraw at any time.
Legal obligation: We may process your data to comply with applicable laws, regulations, or court orders.

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We only share your data in the following circumstances:

Payment processing and membership: We share necessary transaction data with Whop to process your payments and to verify your active plan when you sign in with Whop and during our nightly plan check. Whop is a PCI-DSS compliant payment processor.
Service providers: Hostinger (website hosting and email delivery), Hetzner (hosting for the Service's API, Germany), Cloudflare (DNS, network security and the encrypted connection to our API server; it processes visitors' IP addresses), and GitHub (product feedback issues; your email address is never included in an issue). These providers only access data necessary to perform their services and are contractually bound to protect your information.
Standby copy and backups: a live standby copy of the Service's database and its nightly backups are kept on a server we operate ourselves in the United States (Wyoming). No third party has access to it.
Legal compliance: We may disclose your information if required to do so by law, regulation, or valid legal process.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

Subscription and payment records are retained for the duration of your active subscription plus 7 years for tax and accounting purposes.
Sign-in sessions end after 30 days and are deleted automatically; one-time sign-in links are deleted 7 days after they expire.
Database backups are kept on a rolling schedule (14 daily, 8 weekly and 12 monthly copies), so data you delete leaves the backups within 12 months.
Error reports are kept in server logs, which are rotated and overwritten as they fill up (typically within weeks).
Marketing opt-in data is retained until you unsubscribe or request deletion.
Server logs and analytics data are retained for up to 26 months.

6. Your Rights

Under the GDPR and other applicable data protection laws, you have the following rights:

Right to access: You can request a copy of the personal data we hold about you.
Right to rectification: You can request that we correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten"): You can request deletion of your personal data, subject to our legal retention obligations.
Right to restrict processing: You can request that we limit the processing of your data in certain circumstances.
Right to data portability: You can request your data in a structured, commonly used, machine-readable format.
Right to object: You can object to the processing of your data for direct marketing or legitimate interest purposes.
Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time.

You can exercise access, portability, and erasure directly in the product: the profile menu in the Service offers "Download my data" (a full JSON export) and "Delete account" (removes your portfolios, alerts, bookmarks, and profile, and removes your e-mail address from any feedback you sent). If your plan has ended and you can no longer sign in, you can ask for a data link sent to your e-mail address; it is valid for 30 minutes and lets you do the same download or delete. Copies in our backups disappear as those roll over (see Data Retention). For anything else, contact us at support@goldenpathstrategies.io. We will respond to all valid requests within 30 days.

7. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Cookies and Tracking

We only use strictly necessary cookies: gp_session, set when you sign in to the Service, keeps you signed in for 30 days; gp_oauth exists for at most 10 minutes while you sign in with Whop. The app also remembers a few display choices in your browser's own storage (theme, chart settings, your last strategy filters, and strategies picked for comparison); these never leave your device. None of this is used for tracking or advertising, so no consent banner is needed. We do not employ analytics scripts or advertising trackers; cookieless, aggregated analytics via GoatCounter is planned and stores nothing on your device. See our Cookie Policy. When you make a purchase, you are redirected to our Merchant of Record, Whop, which operates under its own privacy and cookie policies on its domain. For more information, please refer to Whop's Privacy Policy.

9. International Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA): by our service providers (Whop, Cloudflare and GitHub), and on our own standby and backup server in the United States. When we do so, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at support@goldenpathstrategies.io.

Last updated: 26 October 2026

← Return Home