Privacy Policy
Commostream is operated by Yf Prime Ltd., a Canadian corporation. This policy explains how we collect, use, disclose, retain, and protect information when you use the Commostream commodity intelligence platform.
Information We Collect
- Account details such as name, email address, username, company, phone number, address, and verification status.
- Subscription and billing metadata from our payment provider, including customer, subscription, invoice, payment status, promotion, and billing portal events.
- Security data such as sign-in events, session tokens, device fingerprint hashes, IP address or IP network, coarse location headers when available, user agent, failed login counts, and audit logs.
- Product usage data needed to operate dashboards, rate-limit APIs, provide customer support, prevent account sharing, and maintain service reliability.
- Workspace data you create in the product, such as watchlists, trade journal entries, quotes, alerts, prompts, and account preferences.
How We Use Information
We use information to authenticate users, provide the secured workspace, manage subscriptions, process billing, enforce one-device and location-aware account controls, detect abuse, maintain audit trails, support customers, improve reliability, and comply with legal obligations.
Account Security and Anti-Sharing Controls
Commostream is a paid single-account SaaS product. We may limit an account to one active device/session at a time and may use device, IP network, and coarse location signals to detect credential sharing, automated access, or suspicious login patterns. If a session changes device or location unexpectedly, we may revoke the session and require the user to sign in again.
Model, Market, and Workspace Data
Commostream does not publish proprietary model artifacts or private account outputs on its public website. Model outputs, datasets, API responses, workspace content, and authenticated dashboard outputs are available only inside authenticated product workflows and are subject to subscription and access controls.
Service Providers
We may use cloud hosting, identity, database, observability, analytics, email, SMS, and payment providers to operate the service. Providers are used only where needed for product delivery, security, billing, support, or legal compliance.
Retention
We retain account, billing, audit, security, and operational records for as long as needed to provide the service, protect the platform, resolve disputes, comply with legal obligations, and maintain business records. We may retain aggregated or de-identified operational data.
Your Choices
You may contact us to request access, correction, or deletion of personal information, subject to legal, security, billing, and backup-retention requirements. You can manage subscription billing through the account workspace or billing portal.
Safeguards
We use authentication, access controls, hashed passwords, server-side session records, audit logs, subscription gates, and operational monitoring to protect the service. No internet service can guarantee absolute security.
Contact
For privacy, security, or account questions, contact founders@commostream.com.