Privacy Policy

StatOasis respects your privacy and aims to be clear about how personal information is collected, used, disclosed, and protected.

This Privacy Policy applies to StatOasis websites, newsletters, communities, courses, memberships, research publications, trading signals and model portfolios, digital downloads, books, software and tools, customer support, and other StatOasis products and services (collectively, the "Services").

1. Who we are

StatOasis is the commercial business name under which a federally incorporated Canadian corporation operates from Ontario, Canada.

In this Privacy Policy, "StatOasis," "we," "us," and "our" refer to that corporation acting under the StatOasis name.

StatOasis is the organization responsible for deciding why and how personal information is processed in connection with the Services and is accountable for personal information under its control.

Privacy contact
Person Responsible for the Protection of Personal Information
StatOasis
519 Dundas St, Unit 5, Oakville, ON L6M 5K3, Canada
Email: support@statoasis.com

Questions, privacy requests, and complaints may be directed to StatOasis through the privacy contact above.

2. Personal information we collect

The information we collect depends on how you interact with StatOasis.

Contact and identity information

This may include:

• name
• email address
• contact details you provide
• account or profile name
• country or general location where relevant to a transaction, tax, legal, or privacy requirement

Purchase and subscription information

When you buy or subscribe to a StatOasis product or service, we may receive or maintain information such as:

• the product or subscription purchased
• purchase date and transaction status
• transaction or invoice identifiers
• subscription status
• refund, cancellation, or chargeback information
• limited billing-related information provided by the payment processor

Payment card numbers and similar payment credentials are generally collected and processed directly by payment providers such as payment gateways and are not intended to be stored by StatOasis.

Newsletter and marketing information

If you subscribe to a newsletter or request marketing communications, we may process:

• your email address
• subscription status
• consent records
• email engagement information where enabled
• tags, preferences, or segments used to organize subscribers
• referral or signup source

Account and community information

If you join a StatOasis community, course platform, membership, or account-based service, we may process:

• account details
• membership status
• profile information you choose to provide
• posts, comments, messages, or other community contributions
• course progress or access information where supported by the platform

Customer support and communications

If you email us, submit a form, reply to a newsletter, make a privacy request, or otherwise communicate with StatOasis, we may keep the contents of the communication and related contact information so we can respond, maintain business records, resolve disputes, and improve support.

Research, tools, simulations, and preferences

Some StatOasis tools or interactive experiences may ask for information or infer a category based on your answers or activity. For example, a simulation may infer a "trader archetype" that can be used to personalize content if you have permitted that use.

These types of inferences are intended for education, content organization, and personalization. They are not intended to make decisions that produce legal or similarly significant effects about you.

Technical, security, and log information

When you use our websites or online services, we and our service providers may process information such as:

• IP address or a hashed or truncated representation of it
• browser and device information
• operating system
• request and server logs
• timestamps
• security events
• cookie or consent status
• approximate geographic information derived from network information
• information used for rate limiting, fraud prevention, bot detection, and abuse prevention

Not every system stores all of this information, and we aim to minimize what is retained.

Analytics and website interaction information

Where consent is required, we use analytics, performance, error-monitoring, and user-experience tools only after the required choice has been made.

Depending on the tool and your settings, this information may include:

• pages viewed
• referral source
• navigation and funnel events
• pseudonymous device or visitor identifiers
• browser and device information
• clicks and scrolling
• interaction patterns
• heatmap data
• masked session-replay data
• application errors and performance information

We do not currently use this information for cross-context behavioral advertising.

Current consent-based analytics providers are identified in Your Privacy Choices on the website so you can see the services associated with the analytics category before making or changing your choice.

Affiliate and referral information

If you arrive through an affiliate or referral link, or use an affiliate link published by StatOasis, referral identifiers may be used to attribute a visit, signup, or purchase. The third-party website or affiliate network involved may also process information under its own privacy policy.

Information from third parties

We may receive limited information from service providers and platforms used to operate the business, such as:

• payment confirmation from payment processors
• subscription status from email or membership platforms
• purchase or refund status
• affiliate attribution information
• security or fraud signals
• account or service information from platforms you choose to use with StatOasis

3. Why we use personal information

We use personal information only for purposes that are reasonably connected to operating StatOasis and providing the Services.

These purposes may include:

• providing products, memberships, courses, newsletters, research, signals, downloads, tools, and communities you request
• processing purchases, subscriptions, cancellations, and refunds
• managing accounts and access rights
• sending transactional and service communications
• sending newsletters or promotional communications when permitted
• personalizing content when you have permitted personalization
• responding to questions and customer-support requests
• operating, maintaining, securing, debugging, and improving the Services
• measuring website performance and user experience where permitted
• preventing fraud, abuse, spam, attacks, and unauthorized access
• maintaining business, tax, accounting, legal, and compliance records
• enforcing agreements and protecting StatOasis, customers, and other users
• complying with applicable law, legal process, and regulatory requirements

4. Legal bases for EEA and UK processing

Where the GDPR or UK GDPR applies, StatOasis relies on one or more lawful bases depending on the activity.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not make processing that occurred before withdrawal unlawful.

Where we rely on legitimate interests, we consider the nature of the information, the purpose of the processing, and the impact on individuals.

5. Cookies, analytics, and privacy choices

StatOasis uses cookies and similar technologies for a limited number of purposes.

Necessary technologies

Necessary technologies support functions such as:

• security
• consent management
• authentication where applicable
• fraud and abuse prevention
• maintaining essential website functionality

These cannot always be disabled because the relevant service may not function properly without them.

Analytics

Analytics technologies help us understand website traffic, product usage, performance, errors, navigation, and usability.

Where applicable law requires prior consent, these tools remain disabled until you opt in.

Personalization

Personalization technologies may remember preferences or categories, such as an inferred trader archetype, so content or communications can be better organized for you.

Where required, this processing is consent-based.

Advertising

StatOasis does not currently use personal information for cross-context behavioral advertising and does not currently use advertising pixels such as Meta Pixel, Google Ads remarketing tags, LinkedIn Insight Tag, TikTok Pixel, or X Pixel on the StatOasis website.

If this changes, we will update our privacy disclosures and provide any consent or opt-out controls required by applicable law before using those technologies in a manner that requires them.

Your Privacy Choices

You can review or change available cookie, analytics, and personalization choices using Your Privacy Choices or the Cookies control in the website footer.

StatOasis also honors supported Global Privacy Control signals as an opt-out signal for non-essential analytics and personalization.

6. We do not sell personal information

StatOasis does not sell personal information for money.

We also do not currently disclose personal information for cross-context behavioral advertising.

If our advertising practices materially change, we will update this Policy and provide any notices, consent mechanisms, or opt-out rights required by applicable law.

7. Who we disclose information to

We use service providers and other organizations to operate StatOasis. Because our technology stack changes over time, this Policy describes the categories of recipients rather than attempting to maintain a permanent public list of every software vendor.

Depending on the Service you use, personal information may be disclosed to the following categories.

Payment, billing, and financial-service providers

Payment gateways, payment processors, banks, tax, bookkeeping, and accounting providers may process transaction and billing information needed to complete purchases, issue refunds, prevent fraud, and maintain financial records.

Some payment providers act as independent organizations with their own legal obligations and privacy policies rather than solely as processors acting on our instructions.

Email and communications providers

We use providers to deliver newsletters, transactional emails, customer-support communications, and other requested messages.

Course, membership, and community platforms

We may use third-party platforms to provide course access, community access, member profiles, subscriptions, and related services.

Hosting, cloud, database, storage, and security providers

These providers help host websites and applications, store data, run databases, deliver content, prevent abuse, provide bot protection, maintain backups, and keep systems available and secure.

Analytics, performance, and user-experience providers

With the required consent where applicable, these providers help us understand traffic, product usage, errors, performance, heatmaps, and website interactions.

The current consent-based analytics services are identified directly in Your Privacy Choices.

CRM, business-management, and record-keeping systems

We may use customer relationship management, database, spreadsheet, project-management, bookkeeping, and business-operations systems to organize customer, subscriber, transaction, support, and administrative records.

Workflow and automation systems

We use internal and hosted automation tools to move information between the systems needed to provide the Services. Some automation software may be operated by StatOasis on infrastructure supplied by a hosting provider.

AI-assisted business tools

StatOasis may use AI-assisted tools to help draft, organize, or improve customer-support communications and internal work.

When personal information is processed through these tools, our operating policy is to use business services with appropriate contractual privacy protections or to remove identifying information before using consumer-facing AI tools. We do not intentionally submit payment credentials or other highly sensitive information to general-purpose AI tools.

Affiliate and referral providers

Affiliate or referral platforms may process referral identifiers, conversion information, and limited transaction information needed to attribute referrals and calculate commissions.

Professional advisers and legal authorities

We may disclose information to accountants, lawyers, insurers, auditors, consultants, regulators, law-enforcement bodies, courts, or other authorities when reasonably necessary to obtain professional advice, protect legal rights, respond to lawful requests, or comply with law.

Marketplaces, publishers, and fulfillment providers

If StatOasis products are offered through third-party marketplaces, publishing platforms, print-on-demand providers, or fulfillment services, those providers may process order and delivery information under their own terms and privacy policies.

8. Service-provider accountability

StatOasis remains responsible for personal information under its control when it is transferred to a service provider for processing.

Where required, we use contractual, technical, and organizational safeguards appropriate to the nature of the processing. We also maintain internal records of service providers that process personal information on our behalf.

9. International processing and transfers

StatOasis is a federally incorporated Canadian business operating from Ontario, Canada.

Some service providers may process personal information outside Ontario, Quebec, or Canada, including in the United States and other jurisdictions. Information processed in another jurisdiction may be subject to that jurisdiction's laws and lawful access requirements.

Where required by applicable law, StatOasis assesses cross-border privacy risks and uses contractual and other safeguards appropriate to the processing.

For transfers covered by European or UK data-protection law, we use an available lawful transfer mechanism where required, which may include adequacy decisions, contractual safeguards, or another permitted mechanism.

For personal information subject to Quebec privacy law, StatOasis conducts privacy impact assessments for covered cross-border communications and service-provider arrangements and uses written agreements where required.

10. How long we keep information

We do not use one retention period for every type of information.

We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining legally required business and tax records, proving consent where needed, honoring unsubscribe requests, preventing fraud and abuse, resolving disputes, enforcing agreements, and demonstrating compliance.

Retention periods depend on factors such as:

• the nature and sensitivity of the information
• whether an account, membership, or subscription is active
• the reason the information was collected
• legal, tax, accounting, and contractual requirements
• limitation periods and potential disputes
• security and fraud-prevention needs
• the need to maintain a minimal suppression record so an unsubscribe request continues to be respected

When information is no longer reasonably required, we delete, de-identify, or anonymize it where appropriate, subject to legal holds and other lawful retention obligations.

11. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of the information we handle.

These may include access controls, encryption in transit, vendor security controls, authentication, logging, rate limiting, backups, and data minimization.

No internet service, storage system, or transmission method can be guaranteed to be completely secure. If we become aware of a privacy or security incident, we assess it and provide notices to individuals and regulators when required by applicable law.

12. Your privacy rights

Your legal rights depend on where you live and which privacy law applies.

Subject to applicable exceptions, you may have rights to:

• ask whether we hold personal information about you
• request access to personal information
• request correction of inaccurate information
• request deletion or erasure
• withdraw consent
• object to or restrict certain processing
• receive certain information in a portable format
• opt out of certain analytics, personalization, sale, sharing, or targeted-advertising activities where applicable
• complain to an applicable privacy regulator

StatOasis also generally accepts reasonable access, correction, and deletion requests from customers regardless of location, even where a particular statutory right may not apply.

How to exercise your rights

For deletion requests, use:

https://statoasis.com/privacy/requests

For access, correction, portability, objections, complaints, or other privacy questions, contact:

Person Responsible for the Protection of Personal Information
StatOasis
Email: support@statoasis.com

You can unsubscribe from marketing emails using the unsubscribe link provided in the message.

You can change website analytics and personalization choices using Your Privacy Choices in the footer.

We may need to verify your identity before fulfilling a request. We will not ask for more information than reasonably necessary for verification.

We respond within the period required by the law that applies to the request. Where an extension is legally permitted and necessary, we will provide the required notice.

13. Canada and Quebec

StatOasis is accountable for personal information under its control and has designated a person to perform the privacy-responsibility function required by applicable law on behalf of StatOasis. The public contact for that function is identified above.

Residents of Canada may request access to and correction of their personal information and may challenge StatOasis's compliance with applicable Canadian privacy law.

Quebec residents may have additional rights under Quebec privacy legislation, including rights related to access, rectification, portability, consent, and certain automated decisions.

If you are not satisfied with StatOasis's response, you may have the right to contact the Office of the Privacy Commissioner of Canada or, where applicable, the Commission d'acces a l'information du Quebec.

14. EEA and UK residents

Where the GDPR or UK GDPR applies, you may have rights including access, rectification, erasure, restriction, objection, portability, and withdrawal of consent.

You may also have the right to lodge a complaint with the supervisory authority in the country where you live or work, or where you believe a violation occurred.

Nothing in this Policy limits a right that cannot lawfully be waived.

15. United States privacy rights

Some United States state privacy laws apply only when a business meets specified legal thresholds.

Where an applicable US privacy law gives you rights, StatOasis will honor those rights as required. These may include access, correction, deletion, portability, and rights relating to the sale, sharing, targeted advertising, or certain profiling activities.

StatOasis does not currently sell personal information or disclose it for cross-context behavioral advertising.

We honor supported Global Privacy Control signals for non-essential tracking as described above.

16. Commercial email

If you subscribe to StatOasis marketing emails, we use your email address and related consent or subscription records to send those communications.

Marketing emails include an unsubscribe mechanism as required by applicable law. Unsubscribing from marketing does not prevent us from sending non-promotional messages that are reasonably necessary to administer a purchase, account, membership, legal request, or other transaction you initiated.

We may retain a minimal suppression record after unsubscribe so we can continue honoring your request.

17. Children

The Services are intended for adults and are not directed to children under 18.

We do not knowingly seek to collect personal information from children through the Services. If you believe a child has provided personal information to StatOasis, contact the privacy contact identified above so the situation can be reviewed.

18. Third-party websites and services

The Services may contain links to brokers, software companies, affiliate partners, marketplaces, social networks, payment providers, research sources, or other third-party websites and services.

StatOasis does not control the privacy practices of independent third parties. When you leave a StatOasis service or choose to use a third-party platform, that party's privacy policy may apply.

19. Changes to this Privacy Policy

We may update this Policy as StatOasis, its Services, technology, or legal obligations change.

The "Last updated" date at the top identifies the current version.

If a change materially affects how we use personal information or changes a consent-based purpose in a way that requires new consent, we will provide additional notice or request a new choice where required.

A routine change of service provider does not necessarily require renewed consent when the processing purpose and material privacy impact remain the same.

20. Contact and complaints

Privacy questions, requests, and complaints should be sent to:

Person Responsible for the Protection of Personal Information
StatOasis
519 Dundas St, Unit 5, Oakville, ON L6M 5K3, Canada
Email: support@statoasis.com

StatOasis communicates with customers and privacy requesters primarily by email. We will review privacy complaints and attempt to resolve them fairly and promptly.