Trading Hearts

Privacy Policy

This Privacy Policy explains how Trading Hearts Productions LLC, a Florida limited liability company (“Trading Hearts,” “we,” “us,” or “our”), collects, uses, shares and protects personal information when you use our websites, membership and content-publishing tools (together, the “Service”). The Service includes tradinghearts.com, Trading Hearts México (trading-hearts-mexico.pages.dev), and tradinghearts.productions, including the Trading Hearts Content Posting API. We are the controller (in Mexico, the responsable) of the personal information described here.

Readers in Mexico can find our full Spanish-language privacy notice at Aviso de Privacidad Integral.

1. Information We Collect

Information you give us

• Account and sign-in data: your email address. If you sign in with Google or Facebook, we also receive your name, email address, profile picture and that provider’s account identifier. We do not receive your password for those services.
• Membership data: your plan, status, start and renewal dates, and the PayPal subscription and transaction identifiers associated with your membership.
• Records of acceptance: when you tick the boxes to accept our Terms, this Privacy Policy and (at checkout) automatic renewal, we record which versions you accepted, when, where (sign-in or checkout), the email entered or signed in, and the IP address and browser used. We keep these to prove your consent.
• Support messages: what you send us by email.
• Publishing tools (tradinghearts.productions): account details, content you upload or create (documents, images, video, copy), and, when you connect a social account (for example Instagram, Facebook, TikTok, X, LinkedIn or YouTube) so the Service can publish on your behalf, the authorization tokens and account identifiers those platforms provide through their official login (OAuth) flows. We use them only to perform the publishing actions you approve.

Information collected automatically

• Technical and security data: IP address, approximate location derived from IP, browser and device type, pages requested, and timestamps. Our hosting and security provider processes these to deliver and protect the Service.
• Cookies and similar technologies: a small number of strictly necessary items that keep you signed in and protect member content. We do not use advertising or cross-site tracking cookies, and we do not use third-party analytics. See our Cookie Notice.

Payment information

Payments are processed by PayPal. We never receive or store your full card or bank account numbers. PayPal’s handling of your data is governed by PayPal’s own privacy statement.

We do not knowingly collect sensitive personal information (such as health, biometric, financial-account or government-ID data).

2. How We Use Information, and Our Legal Bases

We do not send marketing emails. If we offer a newsletter in the future, you will only receive it if you separately opt in, and you can unsubscribe at any time. We do not use your personal information for automated decision-making that has legal or similarly significant effects on you.

3. How We Share Information

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising. We disclose it only to:

• Service providers (processors) that act on our instructions:
  • Supabase: database, authentication and sign-in emails
  • Cloudflare: website hosting, content delivery, security and email-address protection
  • PayPal: payments and subscriptions
  • Other hosting and infrastructure providers needed to run the Service, under appropriate confidentiality and data-protection obligations
• Sign-in providers: Google or Meta (Facebook), only if you choose to sign in with them.
• Connected platforms: when you publish through our tools, the relevant content goes to the social platform(s) you selected.
• Embedded video: if you press play on an embedded video, it loads from YouTube’s privacy-enhanced (youtube-nocookie.com) player, and Google receives technical data under its own privacy policy.
• Legal and safety: where required by law (see Section 3A), or to protect the rights, safety and security of Trading Hearts, our users or the public.
• Business transfers: as part of a merger, financing, acquisition or sale of assets, subject to this Policy.

3A. Requests from Public Authorities

Effective 23 September 2026, Trading Hearts Productions LLC, United States, applies the following procedures to requests from public authorities for personal information, including data received from Meta. Salvador Palma, CEO, is responsible for enforcing these procedures and approving any disclosure following the required review.

• Required legality review. Before disclosing information, we review the requesting authority, legal basis, jurisdiction, validity and scope of the request, with qualified legal counsel where needed. We do not disclose information solely because a request has been received.
• Challenging unlawful requests. Where a request is considered unlawful, we challenge it through available lawful procedures, seeking clarification, narrowing, withdrawal or judicial review as appropriate, with legal counsel where needed.
• Minimum necessary disclosure. We disclose only the minimum information legally required in response to a valid request, limiting the people, records, data fields and time period covered and excluding unrelated information.
• Documented decisions. We securely document the request, the requesting authority and other actors involved, the legal reasoning and review, any challenge, the decision and approver, our response, and the information disclosed or the reason for refusal. Access to these records is restricted to authorized personnel; retention follows applicable legal, security and operational requirements.

4. Third-Party Platforms

The Service integrates with third-party platforms (including Meta/Instagram/Facebook, Google/YouTube, TikTok, X, LinkedIn and PayPal) through their official APIs. Your use of those integrations is also governed by each platform’s terms and privacy policy, and our use of their data complies with their platform policies and developer terms. Links to third-party sites (for example, Amazon book pages or our social channels) are governed by those sites’ own policies.

5. Data Retention and Deletion

• Account and membership data: while your account is active. After you ask us to delete your account, we delete or anonymize it within 30 days, except as described below.
• Payment and tax records: up to 7 years, as required by tax and accounting law.
• Records of acceptance: for as long as your account exists plus 5 years, so we can prove consent if questioned.
• Security logs: generally no longer than 90 days, unless we need them to investigate an incident.
• Connected social accounts: you may disconnect a linked account at any time, which revokes and deletes our stored access tokens for it.

Deleting your data: email support@tradinghearts.com with the subject “Data deletion request” from the email address on your account. If you signed in with Facebook, you can also remove Trading Hearts in Facebook (Settings & privacy → Settings → Apps and websites) and email us to delete the data we received. Cancel any active membership in PayPal first so you are not billed again.

6. Security

We use administrative, technical and organizational measures designed to protect information, including access controls, encrypted transmission (HTTPS) and access-restricted member content. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the authorities as the law requires.

7. Children’s Privacy

The Service is intended for adults aged 18 or older (or the age of majority where they live). It is not directed to children, and we do not knowingly collect personal information from children under 13, or under 16 in the EU/UK. If you believe a child has given us information, contact us and we will delete it.

8. Your Rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy (access and portability);
• correct it;
• delete it;
• restrict or object to certain processing;
• withdraw consent at any time, where we rely on consent.

• EU/EEA and UK residents: you also have the right to complain to your local data-protection authority.
• U.S. state residents (for example California, Colorado, Connecticut, Virginia and others with consumer privacy laws): you have the rights above where those laws apply to us. We do not sell or share personal information, we do not use it for targeted advertising, and we do not process sensitive personal information to infer characteristics. You may use an authorized agent, and we will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our decision. We treat Global Privacy Control signals as a valid opt-out request, although no sale or sharing occurs.
• Mexico residents: you may exercise your ARCO rights (access, rectification, cancellation and opposition) and revoke consent as described in our Aviso de Privacidad.

To make a request, email support@tradinghearts.com. We will verify your identity by confirming control of your account email, and we will respond within the time the applicable law requires (generally within 30 days, or 45 days under U.S. state laws).

9. International Transfers

We are based in the United States, and our providers may process information in the United States and other countries. When we transfer personal information from the EU/EEA, the UK or Mexico, we rely on appropriate safeguards, such as our providers’ Standard Contractual Clauses or data-processing terms, or on transfers necessary to provide the Service you requested.

10. Changes to This Policy

We will post any update at this URL and change the “Last updated” date and version. If a change is material, we will notify signed-in members by email or on the site before it takes effect, and where the law requires it, we will ask for your consent again.

11. Contact Us

Trading Hearts Productions LLC
11532 Vinci Drive, Windermere, FL 34786, United States
Email: support@tradinghearts.com