This policy explains what personal information Bentley Markets collects on bentleymarkets.com and in the course app, and why. It says where we store it (in the United States and sometimes other countries), which companies help us handle it, and how you can see, fix or delete it. We collect what we need to sell and stream the course, keep accounts secure and keep the records the law requires. We also keep what you choose to send us, such as survey answers. On bentleymarkets.com we also use the Meta Pixel to measure our ads. The course app has no ad pixel. We only send you marketing email if you opt in.
Who we are and how to reach us
This policy covers:
- our website, bentleymarkets.com, including the free lesson and the waitlist on the course page, the Bentley blueprint sign-up, our survey and our call booking pages
- our course app, course.bentleymarkets.com, where you sign in, buy and watch the "Build an AI Trading System" course
- the emails we send you
It does not cover the third-party services the course shows you how to use, such as Hostinger, OpenAI (ChatGPT), Anthropic (Claude and Claude Code), Nous Research (Hermes), Telegram, crypto exchanges or market data providers. You sign up with them directly, they have their own privacy policies, and we do not receive the information you give them.
- Business name
- Bentley Markets, the trade name of the business named above
- bentley@bentleymarkets.com
What we collect
Information reaches us in three ways. You give it to us (your email address, for example). Our systems record it when you use the course app (your lesson progress, for example). Our service providers collect it when they deliver a service to you (Stripe takes your card details, for example).
| Data | Why we collect it | Where it is stored |
|---|---|---|
| Account details (course app): your email address, your first name (optional), your marketing email choice and the time you gave or withdrew it, when your account was created and when you last signed in. Our sign-in provider also records the IP address and browser details used when you sign in. If we add an optional password later, it is stored only in scrambled (hashed) form. | To create your account, email you 6-digit sign-in codes, recognize you when you come back, protect sign-in from abuse and rate limits, and know whether you agreed to marketing email. | Supabase, United States (AWS us-west-2, Oregon) |
| Access records (course app): which courses you can watch and how you got access (a purchase, or free access we gave you). It also holds when access was granted or taken away and why, and any internal notes we add. If we give free access to an email address that has no account yet, we keep that address and a short note until the account is created. | To unlock the courses you have, and to record why we suspended access, for example for sharing a login. | Supabase, United States |
| Purchase records: your email address, the amount, currency and payment status, Stripe reference IDs, your country, the version of the Terms you accepted and the time you accepted them. We may also keep a copy of the payment messages Stripe sends us. These can include your name, billing address, and your card's brand and last 4 digits (never the full number). | To unlock the course, prove what you bought and on which terms, keep tax and accounting records, check where we can sell, and answer card disputes. | Supabase, United States |
| Payment details: your card or Apple Pay, Google Pay or Link details, and the billing details Stripe asks for at checkout. | To take your payment and calculate tax. | Stripe. We never see or store your full card number. In our Stripe account we can see your name, billing address, card brand, the last 4 digits and the expiry date. Stripe's own use is covered by Stripe's privacy policy. |
| Lesson progress: where you stopped in each lesson, how many seconds you watched, and which lessons you completed. | To let you pick up where you left off on any device, and to show your progress. | Supabase, United States |
| Playback log: a record made each time our server gives you a short-lived pass to stream a lesson. Each record holds which lesson, the time, your IP address, your browser's user agent and your country. The user agent is a short line of text that names your browser, its version and your operating system. | Security: to spot one account being used from many places (shared logins), to limit how often streams can be requested, and as evidence if a card payment is disputed. | Supabase, United States |
| Video streaming data: your IP address, device and browser details, and which video you are watching. | So Mux can deliver lessons 02 to 11 to your device. Lesson 01 is served by Vercel, which hosts our sites, so Mux is not involved. | Mux, United States |
| Free lesson 01: watching it needs no account. On bentleymarkets.com/course, Vercel serves it and sees your IP address as with any visit. The Meta Pixel and Vercel Web Analytics run on that page as on the rest of the site, and the Pixel records the first time you play the lesson. In the course app, lesson 01 needs a free account. It is served as a plain video file, so watching it there adds nothing to the playback log. | To show you the free lesson, and to count and measure visits (see Website visits below). | Vercel and Meta, United States |
| Waitlist (bentleymarkets.com/course): your email address, your first name (optional), the time you joined and which list. We also keep the consent wording you agreed to, the page you signed up on, and your country, worked out from your IP address. | To email you when checkout opens for the Build course, and occasionally about new Bentley courses, as the form says. | A private file store at Vercel (Vercel Blob), United States. Sign-ups are not sent to HubSpot yet; if we connect a HubSpot waitlist form later, new sign-ups go there too. |
| Blueprint sign-up (bentleymarkets.com): your email address, the page you signed up on and the consent wording you agreed to. | To send you the Bentley blueprint and occasional emails about building AI trading systems, as the form says. | HubSpot |
| Survey answers (bentleymarkets.com/survey): your email address, your first name, and your answers to each question, such as your trading experience, the markets you trade and your trading style. This includes anything you type in the free-text boxes. | To learn what traders want from Bentley, and to send you the Bentley blueprint and occasional emails, as the form says. | Your answers: a private file store at Vercel (Vercel Blob), United States. Your email address also goes to HubSpot. |
| Call bookings: the details you enter when you book a call with us, such as your name, email address and the time you pick. | To book and hold the call you asked for. | TidyCal |
| Marketing email list: your email address, first name, the record of your consent, whether you unsubscribed, and whether you opened our emails and which links you clicked. | To send you the emails you agreed to on each form (see Your consent and marketing email), only if you opted in. | HubSpot, or our own sender built on Resend |
| Website visits (bentleymarkets.com only): pages you view, your IP address, browser and device details, and cookie IDs set by Meta. The Meta Pixel also records when you join a list or click to book a call. It records clicks on email or info-session links too, the first time you play a video on our site (lesson 01, a Bentley Academy lesson or the video on our call page), and visits where you stay 30 seconds and scroll halfway down a page. | To measure our ads (Meta Pixel) and count visits (Vercel Web Analytics). | Meta and Vercel, United States |
| Emails you send us: your email address and whatever you write. | To answer you. |
See How long we keep it for how long we keep each kind of information.
Please never send us your API keys, exchange keys, server passwords or wallet seed phrases, including in support emails.
How we use it
We use your information to:
- Run your account: sign you in with emailed codes, keep you signed in, and protect sign-in from abuse.
- Sell you the course: take payment through Stripe, calculate tax, unlock the course the moment payment clears, and send your order email.
- Deliver the course: stream the lessons and save your progress.
- Keep accounts secure and enforce our Terms: an account is for one person. We watch for one account being used from many places, limit how often streams can be requested, and may suspend access for sharing.
- Answer card disputes: if you dispute a payment, we send your purchase record, your Terms acceptance and your playback log (including IP addresses and browser details) to Stripe. Stripe passes them to the card network and your card issuer to decide the dispute.
- Keep records the law requires, such as tax and accounting records.
- Answer your questions when you email us.
- Book calls and read survey answers, when you book a call or fill in our survey.
- Send marketing email, only if you opted in.
- Measure our ads and count visits on bentleymarkets.com.
We do not use your information for any other purpose without telling you first and, where the law requires, asking for your consent.
Your consent and marketing email
Canadian privacy law is based on consent.
Your account and the course
When you create an account or buy the course, you consent to us using the information in this policy for those purposes. That means running your account, delivering the course, keeping it secure and keeping the records the law requires. We cannot provide the course without it.
Marketing email
We choose to send marketing email only with your express consent, which is stricter than Canada's Anti-Spam Legislation (CASL) requires. That means you agreed in one of these ways:
- You ticked the marketing box in the course app: "Email me when new Bentley lessons or courses come out." The box is never ticked for you.
- You joined the waitlist on the course page, which says we can email you "when checkout opens for the Build course, and occasionally about new Bentley courses".
- You signed up for the Bentley blueprint, or filled in our survey, and agreed to "receive the Bentley blueprint and occasional emails from Nick about building AI trading systems".
We keep a record of each consent. For the waitlist, that is the time you joined, the exact wording you agreed to and the page you used. For the blueprint and survey forms, HubSpot keeps the wording you agreed to and the page you used. For course app accounts, we record the time you gave or withdrew consent.
Every marketing email names Bentley Markets, gives our mailing address and a way to contact us by email or on our website, and has an unsubscribe link.
You can unsubscribe at any time. We act on it promptly, and within the 10 business days CASL allows.
Service email
Some emails are part of the service, not marketing: sign-in codes, your order email, and important notices about your access. You have access as long as the course is offered, with 60 days' notice and a download option if it closes. You get these emails whether or not you opt in to marketing.
For now, sign-in emails come from Supabase's mailer. We plan to send sign-in codes and order emails through Resend, from our own domain.
Storage outside Canada
We are based in British Columbia, but our main service providers store and process data in the United States. Our database (Supabase) runs in Oregon. Our hosting, waitlist and survey store (Vercel) and our video streaming (Mux) are in the US. Stripe, Resend, HubSpot, Meta, TidyCal, Google, Cloudflare and our support inbox provider may process data in the US and other countries.
What this means for you:
- While your information is in another country, that country's laws apply to it. US courts, law enforcement and national security agencies may be able to get it under US law, without telling us or you.
- US privacy law does not give you the same protections as Canadian law.
- We stay responsible for your information when a provider handles it for us.
By using our sites or the course app, you understand that your information will be stored and processed outside Canada.
How we protect it
- Your card details go straight to Stripe. We never see or store your full card number.
- You sign in with a one-time code sent to your email, so you do not need a password.
- We limit who can see customer records. Only our admins can see them in our admin tools.
- We check your access on our server before any paid lesson streams.
- Links to paid lessons expire.
No system is perfectly secure, and we cannot promise that your information will never be accessed without permission. If a breach of our safeguards creates a real risk of significant harm to you, we will tell you and report it as the law requires.
You can help by keeping your email account secure, since your sign-in codes go there, and by never sharing a sign-in code with anyone.
How long we keep it
We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires. After that we delete it or make it anonymous.
| Information | How long we keep it |
|---|---|
| Account details | While your account is open. |
| Sign-in records (IP address and browser details) | While your account is open. |
| Access records and free access | While your account is open. |
| Lesson progress | Until you close your account. It is deleted with the account. |
| Playback log | While your account is open. |
| Purchase records | Kept after you close your account, with your email address, because they are financial records. |
| Copies of Stripe payment messages | While your account is open. |
| Waitlist entries | While your account is open. |
| Survey answers | While your account is open. |
| Call bookings | While your account is open. |
| Marketing consent records | While your account is open. |
| Unsubscribe record | Kept so we never email you again after you unsubscribe or close your account. |
| Support emails | While your account is open. |
| Backups | Deleted data may stay in backups for a limited time, then is overwritten. |
| Data held by Stripe, Mux, Meta, Vercel, Supabase, HubSpot, Resend, TidyCal, Google and Cloudflare | Set by each provider's own policy. |
Your rights and how to use them
You have the right to:
- Access: ask what personal information we hold about you, how we have used it and who we have shared it with, and get a copy.
- Correction: ask us to fix information that is wrong or incomplete.
- Withdraw consent: stop marketing email at any time in any of these ways:
- the unsubscribe link in any marketing email
- the marketing box on your account page in the course app
- emailing us
- Close your account: ask us to close your account and delete your information. We delete your account details, lesson progress and access records from the course app. We also remove you from our email lists (HubSpot, Resend and the waitlist), except the record that stops us emailing you. We keep the records the law requires, such as purchase and tax records, and the playback log for as long as set out in How long we keep it. Copies held by providers such as Stripe and Meta follow their own policies. Closing your account ends your access to the course. It does not change the refund terms in our Terms.
How to make a request
- Email us at bentley@bentleymarkets.com from the email address you used with us. Or write to us at the address in Who we are and how to reach us.
- Say what you want: a copy of your information, a correction, or closing your account.
- We may ask you to prove it is you, for example by entering a sign-in code we send to your email address.
We will answer within 30 days. Requests are free. If we cannot give you everything you asked for, we will tell you why.
Children
Our course is for people 18 and over. You must be at least 18 to create an account or buy the course. We do not knowingly collect personal information from anyone under 18. If you think someone under 18 has given us their information, email us. We will close the account and delete the information, except records the law requires us to keep.
If someone under the age of majority bought the course, we will refund them where the law requires (see Refunds in our Terms).
Changes to this policy
We may update this policy when our services, our providers or the law change. We will post the new version on this page with a new "last updated" date at the top.
If a change affects how we use information we already hold in a significant way, we will email you before it takes effect. That applies if you have an account, or if you are on our waitlist or email list. Where the law requires it, we will ask for your consent again.
Contact us
For questions, requests or complaints about your personal information, use the contact details in Who we are and how to reach us.
See also our Terms and our risk disclaimer.