Effective Date: April 27, 2026 Last Updated: April 27, 2026

This Privacy Policy explains how Dr. David Alcindor, a sole proprietor doing business as 4xForecaster ("we," "us," "our"), collects, uses, shares, and safeguards personal information when you visit https://www.4xforecaster.com (the "Site") or subscribe to our paid services (collectively, the "Service"). We are based in the United States.

---

1. Information We Collect

Information you provide directly: name (optional), email address, payment-card details (transmitted directly to our payment processor and not stored on our servers), billing address, account password (stored hashed), preferences, and any messages you send us.

Information collected automatically: IP address, user-agent, device and browser type, operating system, referring URL, pages viewed, timestamps, approximate location derived from IP, and information from cookies and similar technologies (see Cookie Policy below).

Information from third parties: confirmation of payment from Stripe, engagement data (opens, clicks) from our email service provider, and aggregated analytics from our analytics provider if enabled and consented to.

We do not intentionally collect sensitive personal information beyond your account log-in credentials, which we use solely to authenticate you and secure your account.

2. How We Use Information

We use personal information to: (a) provide, operate, secure, and maintain the Site and Service; (b) process payments and prevent fraud; (c) communicate with you about your subscription, respond to inquiries, and deliver newsletters and notices; (d) analyze usage and improve the Service; (e) comply with legal obligations and enforce our agreements; and (f) prepare aggregate, de-identified analytics that do not identify you.

3. Legal Bases (EU/UK Visitors)

Where the EU General Data Protection Regulation, the UK GDPR, or the Swiss Data Protection Act applies, we process personal data on the bases of: (i) performance of a contract (Article 6(1)(b)); (ii) consent (Article 6(1)(a)) for marketing emails and non-essential cookies, withdrawable at any time; (iii) legitimate interests (Article 6(1)(f)) for fraud prevention, security, and basic site operation; and (iv) compliance with legal obligations (Article 6(1)(c)).

4. Third-Party Service Providers

We share personal information with the following processors strictly to operate the Service:

Vercel Inc. — website hosting and delivery. Privacy policy: https://vercel.com/legal/privacy-policy

Stripe, Inc. — payment processing (when activated). Stripe is certified under the EU-U.S. Data Privacy Framework. Privacy policy: https://stripe.com/privacy

Google LLC (Google Analytics 4) — analytics, only where enabled and you consent. Privacy policy: https://policies.google.com/privacy

We access read-only third-party financial data APIs operated by the Federal Reserve Bank of St. Louis (FRED) and Yahoo Finance. We do not transmit any personal information about you to these data providers.

5. International Data Transfers

Because we are based in the United States, your personal information will be transferred to and processed in the U.S. For transfers from the European Economic Area, the United Kingdom, or Switzerland, we rely on the EU-U.S. Data Privacy Framework (and its UK Extension and Swiss-U.S. version) where the recipient is certified, and on the European Commission's 2021 Standard Contractual Clauses where the recipient is not DPF-certified.

6. Data Retention

We retain active subscriber records for the duration of your subscription plus 12 months. Payment records are retained for 7 years for tax and accounting purposes. Server and access logs are retained for up to 90 days. Analytics event data is retained for up to 14 months. Cookie consent records are retained for up to 24 months. When we no longer have a legal basis to retain personal data, we delete or anonymize it.

7. Your Privacy Rights

Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccuracies; delete your personal information; restrict or object to processing; port your data; withdraw consent at any time; opt out of the sale or sharing of your personal information; and limit the use of sensitive personal information.

We do not sell personal information for money. We honor Global Privacy Control (GPC) browser signals as a valid opt-out of any sharing for cross-context behavioral advertising.

To exercise any right, email privacy@4xforecaster.com with sufficient detail for us to verify your identity. We will respond within thirty (30) days under GDPR/UK GDPR or forty-five (45) days under CCPA/CPRA. You may also lodge a complaint with a supervisory authority in your jurisdiction.

8. Children

The Service is not directed to children under the age of sixteen (16), and we do not knowingly collect personal information from children under sixteen. If you believe a child under sixteen has provided personal information, please contact privacy@4xforecaster.com and we will promptly delete it.

9. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), access controls, and regular review of our service providers' security practices. No method of internet transmission or electronic storage is one hundred percent secure. In the event of a personal-data breach, we will notify you and the appropriate regulators consistent with applicable law.

10. Changes to This Privacy Policy

We will post any updates on this page and update the "Last Updated" date. Material changes will be communicated by email to active subscribers at least thirty (30) days before they take effect.

---

Cookie Policy

This Cookie Policy supplements and forms part of our Privacy Policy.

What Cookies Are

Cookies are small text files placed on your device when you visit a website. We also use related technologies such as local storage and pixel tags; references to "cookies" include these.

Categories of Cookies We Use

Strictly necessary — authentication, security, session continuity, fraud prevention. No consent required.

Functional / preferences — remember settings such as theme and language. Consent required for EU/UK visitors.

Performance / analytics — understand how visitors use the Site (e.g., Google Analytics cookies). Consent required for EU/UK visitors. GPC honored in U.S.

Advertising / targeting — we do not currently use advertising cookies.

Your Choices

When you first visit, you may Accept All, Reject All, or Customize non-essential cookies. You can change your preferences at any time through the Cookie Settings link in our footer. We detect and honor the Global Privacy Control (GPC) browser signal as a valid opt-out. You can also block or delete cookies through your browser settings. For Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout

Retention

Strictly necessary cookies expire at session end or shortly thereafter. Analytics cookies may persist up to 13 months. Consent records are retained for up to 24 months.

---

Contact

Dr. David Alcindor — privacy@4xforecaster.com