Privacy Policy

1. Who We Are

Empowered Kapital is a financial education and trading simulation platform. This privacy policy explains how we collect, use, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) and Norwegian data protection laws.

Contact: Fabianthandersen@hotmail.com

2. Data We Collect

Data Type	What	Why
Account data	Name, email, password (bcrypt-hashed)	Account creation and authentication
Profile data	Country, timezone, preferences	Personalise your experience
Simulation data	Virtual trades, portfolio, XP, prestige	Core platform functionality
Community data	Posts, replies, likes	Community features
Payment data	Processed by Stripe — we never see your card number	Subscription management
Usage data	Page views, feature usage, login times	Improve the platform
Referral data	Referral codes, signup tracking	Referral programme

3. How We Use Your Data

We use your data to:

• Provide and maintain the platform
• Authenticate your account and sessions
• Process payments via Stripe
• Send password reset emails
• Deliver notifications about your account and trades
• Improve the platform based on usage patterns
• Moderate community content

We do not use your data for targeted advertising or sell it to third parties.

4. Data Storage and Security

• Passwords are hashed with bcrypt — we cannot read them
• API keys and sensitive credentials are stored server-side only
• JSON data files are protected from public access via .htaccess
• Payment data is handled entirely by Stripe (PCI DSS compliant) — we never store card details
• Data is stored on our hosting provider's servers in Europe

5. Cookies

We use the following cookies:

Cookie	Purpose	Duration
ek_session	Keeps you signed in	Session / persistent (if "Remember me")
ek_cookie_consent	Remembers your cookie preference	1 year

We also use localStorage to store your simulation data (portfolio, trades, XP, preferences) locally in your browser. This data stays on your device.

6. Third-Party Services

We use the following third-party services:

• Google OAuth — for "Sign in with Google" (Google's privacy policy applies)
• Stripe — for payment processing (Stripe Privacy Policy)
• Anthropic — for the AI Mentor feature (conversations are not stored by us beyond the session)
• Google Fonts — for typography (no personal data shared)

7. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data via Account Settings
• Erasure — delete your account and all data via Account Settings → Delete Account
• Portability — export your data (transaction history and order history have CSV export)
• Restriction — request we limit processing of your data
• Objection — object to certain data processing
• Withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, email Fabianthandersen@hotmail.com.

8. Data Retention

• Active accounts: Data retained while your account is active
• Deleted accounts: All data permanently removed within 30 days
• Payment records: Retained for 7 years for tax/legal compliance (via Stripe)
• Community posts: Removed when you delete your account or delete individual posts

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or platform notification. The "Last updated" date at the top reflects the most recent revision.

10. Contact

For privacy-related questions or requests:

• Email: Fabianthandersen@hotmail.com
• Support: Customer Service page

Your privacy matters to us. If you have any concerns, don't hesitate to reach out.