marketsinfive

Privacy notice

Last updated 23 October 2026.

This notice explains what personal information Markets In Five (“we”, “us”) handles when you visit marketsinfive.com, use the app at app.marketsinfive.com, or write to us. Markets In Five is a Canadian business, and we handle personal information under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, provincial privacy laws such as Quebec’s Law 25.

Who is responsible

Our privacy officer is responsible for how we handle personal information. You can reach them at [email protected].

The short version

What we collect and why

When you write to us

The contact form sends us your name, email address, message and the time you sent it. If you email us, we receive your email address and what you write. We use this only to read and answer your message. You consent to this when you tick the box on the form or send us an email.

When you ask for marketing email

If you tick “Email me product news. Unsubscribe any time.” on the contact form, or “Email me product news and the weekly recap” when you create an account (or later on the account screen), we keep a consent record: your email address, whether you granted or withdrew consent, where you did it, which wording you saw, and the time. OneSignal sends those marketing emails from our sending subdomain. The weekly recap and other product news go only to people who ticked the account box. You can turn marketing email off on the account screen or use the unsubscribe link in any marketing message. Unsubscribing does not delete your account.

When you create an account

We store the email address and name you give us, whether the email is verified, your plan (free or Five+), and the consent records above. Service messages about your account — email verification and password reset — are sent through Resend. Those are not marketing; we send them so you can use the account.

When you visit the website or the app

Every request passes through Cloudflare, which protects and delivers the site. To do that, Cloudflare processes your IP address and basic request details (browser type, page requested, time) and may keep them in its security logs for a short period. Our own servers do not record your IP address. We rely on this only to keep the service secure and available.

When you visit the website

The website counts visits the same way the app does, through PostHog and without cookies: the page you open, the site that linked you to us (including campaign tags in the link), whether you follow a link to the app or to one of our social profiles, and that the contact form was sent (never what you wrote). Each visit gets a random number kept only in memory, so we cannot recognise you on your next visit. If your browser sends a Global Privacy Control signal, the website records nothing.

When you use the app

To see which parts of the app are useful and to catch errors, the app records usage events: the pages and tabs you open, the display switches you use, the stocks and alerts you open, and errors. Each event carries your browser type, screen size, language, the site that linked you to us, and an approximate location (country and city) that our analytics provider works out from your IP address. Events carry a random visit number that is kept only in memory, so we cannot recognise you from one visit to the next and no cookie or stored identifier is used. If you sign in, we link events to your account number, never to your wallet address or email. We use PostHog for this and keep usage events for up to 12 months. If your browser sends a Global Privacy Control signal, the app records nothing.

In the web app we also record how the screen changes as you use it (session replay): what is shown, where you click and scroll, so we can see where the app is confusing or broken. Everything you type is hidden before it leaves your browser, and the sign-in, sign-up, password and account screens are never recorded. The recording is linked to the same random visit number (or your account number if you are signed in), uses no cookie or stored identifier, and ends when you close or reload the page. We use PostHog for this and keep recordings for up to 30 days. The website (marketsinfive.com) is recorded the same way, with everything you type in the contact form hidden. When you follow a link from the website into the app, the link carries the website visit’s random number, so we can see the website visit and the app visit as one journey; it is not tied to who you are unless you then sign in. If your browser sends a Global Privacy Control signal, nothing is recorded.

If you turn on notifications

The app can send you notifications (for example market alerts) through OneSignal. To offer this, the app loads OneSignal’s notification script, which keeps a random device identifier in your browser’s storage and receives your IP address, browser or phone type, language and time zone. Nothing is sent to you until you allow notifications when your browser or phone asks. If you allow them, OneSignal stores a push token for your browser or device so it can deliver them; if you are signed in, it is linked to your account number and plan (free or Five+), never your email. You can turn notifications off at any time in your browser or phone settings,, and you can ask us to delete your notification record at any time.

On your device

The app saves your display choices (light or dark, units, which cards are open, the filters you pick, and when you last opened alerts) in your browser’s local storage. These stay on your device and are never sent to us. You can clear them at any time in your browser settings.

Who handles it for us

We use a small number of providers who process data on our instructions:

These providers may store or process your information outside Canada, including in the United States and Europe. While it is there, it is subject to the laws of that country, and courts, law enforcement or national security authorities there may be able to access it. We choose providers that protect information to a standard comparable to Canadian law, and we bind them by contract to use it only for the services they provide to us.

Deleting your account

When you delete your account, we remove your sign-in profile and sessions, and we delete the matching OneSignal person. If you have a Five+ subscription, we cancel it, so you won't be charged again. We keep a record that you withdrew marketing consent (your email address and the date) as proof under Canada's anti-spam law; nothing else tied to your account is kept. Stripe keeps payment and invoice records as tax law requires.

How long we keep it

We keep contact messages, and the copy in the Telegram notice, for up to 12 months after our last reply, so we can follow up on the same conversation. After that we delete them. Consent records stay for as long as we need to show what you agreed to (and for a reasonable period after you leave), then we delete them. You can ask us to delete personal information sooner at any time.

Your rights

You can ask us whether we hold personal information about you, get a copy of it, and ask us to correct it if it is wrong. You can ask us to delete it. You can withdraw your consent at any time, subject to legal or contractual limits. If you do, we may not be able to answer your message. To make a request, email [email protected]. We reply within 30 days and do not charge for it.

If you are not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). If you live in Quebec, Alberta or British Columbia, you can also contact your provincial privacy commissioner.

Children

Markets In Five is meant for adults. We do not knowingly collect information from anyone under the age of majority in their province or territory.

Changes

If we change how we handle personal information, for example when we add accounts, an email list or payments, we will update this page and the date above before the change takes effect.