Viktor Protocol Privacy Policy

Last updated: October 26, 2026

This Privacy Policy explains how Viktor Protocol ("Viktor Protocol," "we," "us" or "our") collects, uses and shares personal information when you visit [viktorprotocol.com], create an account, subscribe, or use the subscriber dashboard (together, the "Service"). It forms part of our Terms of Service.

1. The short version

• We collect what we need to run your subscription: your name, email, billing details and account activity.
• Payments are handled by Shopify and its payment partners. We never see or store your full card number.
• The dashboard doesn't track you. It doesn't use advertising cookies or analytics of its own.
• We don't sell your personal information, and we don't share it for cross-context behavioural advertising.
• You can ask to see, correct or delete your information at any time.

2. Information we collect

Information you give us

• Account and order details: name, email address, billing address, phone number (if you provide it), and your subscription and order history.
• Payment details: entered at checkout and processed by Shopify and its payment partners. We receive only limited information, such as the card type and last four digits.
• Messages: what you send us by email or through our contact form.

Information collected automatically

• Store activity: when you browse our store, Shopify collects device and usage information such as IP address, browser type, pages viewed, referring site and approximate location, using cookies and similar technologies. See our Cookie Policy.
• Dashboard access: when you open the dashboard, Shopify passes our server your customer ID and a security signature so we can confirm you're signed in. Our server uses your customer ID to check that your subscription is active and to limit how often the dashboard can be refreshed. We don't attach your name or email to these requests, and we don't keep a log of what you view.
• Server logs: our hosting provider may keep standard technical logs, including IP addresses and request times, for security and troubleshooting.
• Your browser: the dashboard remembers which index tab you last viewed (SPY or QQQ) in your browser's local storage. It stays on your device and isn't sent to us.

We don't collect information about your investments, brokerage accounts, trades or finances, and you should never send it to us.

3. How we use your information

• To create and manage your account and subscription, process payments and renewals, and give you access to the dashboard.
• To send service messages, such as receipts, renewal reminders, billing problems, changes to the Service or these policies, and replies to your questions.
• To send product updates or marketing emails, but only where you've agreed or the law otherwise allows. Every marketing email has an unsubscribe link.
• To keep the Service secure: preventing fraud, account sharing and abuse, and enforcing our Terms.
• To understand how the store is used and improve it, using aggregated information where possible.
• To meet legal, tax and accounting obligations.

Where the law requires a legal basis (for example, in the EU or UK), we rely on: performing our contract with you; our legitimate interests in running and securing the Service; your consent (for marketing and non-essential cookies); and legal obligations.

4. Who we share it with

We share personal information only with service providers that help us run the Service, under contracts that limit how they can use it:

• Shopify, which hosts our store, customer accounts, checkout and subscriptions. See Shopify's Privacy Policy.
• Payment processors, through Shopify, to process payments.
• Google Fonts, which supplies the dashboard's typeface and receives your IP address when the font loads.

We may also share information if the law requires it, to protect our rights or users' safety, or as part of a merger, acquisition or sale of the business (where it would stay protected by this policy or one at least as protective).

We don't sell personal information, and we don't share it for cross-context behavioural advertising.

5. How long we keep it

We keep account and subscription information while your account is open and for as long as needed afterwards to meet legal, tax and accounting requirements (usually [7] years for transaction records). Subscription-check results on our server are kept for a few minutes. We delete or anonymize information we no longer need.

6. Your choices and rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy;
• correct information that's wrong or incomplete;
• delete your information (subject to legal record-keeping requirements);
• withdraw consent, such as for marketing emails or non-essential cookies;
• object to or restrict certain uses, and move your information to another service;
• complain to a data protection or privacy authority.

To make a request, email privacy@viktor-protocol. We'll confirm your identity before acting on it and respond within the time the law requires (usually 30 days). We won't treat you differently for exercising your rights.

You can update your account details yourself in your account, unsubscribe from marketing emails using the link in any email, and control cookies through our cookie banner and your browser settings.

7. Security

We use reasonable safeguards for the information we hold. These include encrypted connections, signed requests between Shopify and our server, access limits, and keeping our server free of payment and contact details. No system is completely secure; if a breach affects your personal information, we'll notify you and the authorities as the law requires.

8. Where information is stored

We're based in Canada. Shopify and our other providers may store and process information in [Canada, the United States] and other countries, where privacy laws may differ from yours. When we transfer information internationally, we rely on our providers' safeguards, such as standard contractual clauses where required.

9. Children

The Service is for adults only. We don't knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we'll delete it.

10. Changes to this policy

We may update this policy. We'll post the new version with a new "Last updated" date and, for significant changes, email subscribers before they take effect.

11. Contact

Privacy questions and requests: Viktor Protocol privacy@viktor-protocol.com