Privacy Policy

Effective Date: May 22, 2026
Last Updated: May 22, 2026
Entity: Fusion Indicators LLC, an Indiana limited liability company

This Privacy Policy explains how Fusion Indicators LLC ("Fusion Indicators," "we," "us," or "our") collects, uses, discloses, and protects information when you:

1. Information We Collect

A. Information You Provide Directly

We may collect:

B. Commerce, Account, Subscription, and Refund Information

When you sign up, purchase, renew, cancel, request a refund, or manage your account, we may collect or receive:

We do not intend to store full payment card numbers or CVC codes in our own application databases. Payment information is generally processed by third-party payment processors and commerce providers.

C. Website, Device, Cookie, and Usage Information

When you use our website, we and our providers may collect:

D. Software Activation, Licensing, Entitlement, and Telemetry Information

When you install or use Fusion Indicators desktop software, licensing systems, or related components, we may collect or receive:

Supabase/license and refund records are account/license/subscription-linked. They should not be described as anonymous.

E. AI Studio / ONNX Trainer Information

The current AI Studio / ONNX trainer runtime is designed primarily to run locally on the user’s machine. In ordinary operation:

2. Sources of Information

We collect information:

3. How We Use Information

We may use information to:

4. How We Disclose Information

We may disclose information:

We do not sell your personal information as "sale" is defined under the California Consumer Privacy Act. Additional California sharing and opt-out disclosures appear in Section 7A.

5. Current Service Providers and Platform Categories

Depending on the feature used, our stack may include providers or services in these categories:

CategoryCurrent provider or toolPurpose / data context
Website hosting and managed WordPressGoDaddy Managed WordPressWebsite hosting, server logs, platform security, managed WordPress infrastructure
WordPress commerceWordPress, WooCommerce, WooCommerce SubscriptionsAccounts, checkout, orders, subscriptions, renewal/cancellation state
License managementLicense Manager for WooCommerce and Fusion license-validation logicLicense keys, activation/access state, download permissions
Payment processingStripe and PayPal where enabledCard/payment processing, subscription billing, refunds, limited payment metadata
Database / entitlement mirrorSupabaseLicense/entitlement mirror, refund_requests, refund_request_events, validation/refund state
Transactional emailPostmark (operated by ActiveCampaign LLC), accessed through the FluentSMTP WordPress pluginDelivery of account, billing, renewal, refund, support, and system emails. Postmark is U.S.-hosted (Deft data center outside of Chicago, plus Amazon Web Services). Postmark retains full message content and activity logs for forty-five (45) days by default; bounce and spam-complaint suppression records are retained indefinitely for sender-reputation hygiene per Postmark’s published policy.
Email validationNone active at this timeWe may engage an email-deliverability or fraud-prevention provider in the future; if so, this Privacy Policy will be updated to identify the provider before the service is enabled.
Download deliveryCloudflare Worker and Cloudflare R2Signed/authorized download delivery and object storage. Cloudflare may log Your IP address, the object key, request timestamp, response status, and byte counts. Download links use temporary signed tokens; You should not share download URLs.
SecurityWordfenceFirewall, scan, login/request/security-event data, IP/user-agent/security logs
Analytics / attributionGoogle Site Kit / Google Analytics and any WooCommerce attribution tooling still activeSite analytics, traffic source, page/session data
Local installer/runtimeFusion installer, local AI Studio / ONNX trainer runtimeLocal files, local settings, local runtime metadata, installer status text
Backup/export toolingGoDaddy backups, Duplicator or comparable tools if activeSite/database/upload backups that can contain personal data

TrustedSite is not listed as an active processor because the TrustedSite plugin has been deactivated and the badge is not currently in use. We may engage a trust-mark or website-certification provider in the future; if so, this Privacy Policy will be updated to identify the provider before the service is enabled. We previously used Kickbox (a U.S.-based email-verification service headquartered in Dallas, Texas) for billing-email deliverability validation; that integration has been disabled. If we re-enable email-verification in the future, this Privacy Policy will be updated to identify the provider and describe the data transmitted.

Your browser or device may also receive cookies or scripts from these categories of providers where needed for checkout, login, analytics, attribution, or site security. We may publish a formal subprocessor register separately.

6. Cookies and Similar Technologies

We and our providers may use cookies, local storage, pixels, session tokens, or similar technologies. We organize these technologies into two categories:

Strictly necessary cookies and similar technologies are required for the Website, account, checkout, payment, security, and license-validation functions to operate. These include WordPress login/session cookies, WooCommerce cart and checkout cookies, Stripe checkout cookies, GoDaddy Managed WordPress hosting cookies (for load balancing, session affinity, and platform security), and Wordfence security cookies. Strictly necessary cookies are not gated behind consent because the Website cannot function without them.

Non-essential cookies and similar technologies include analytics and attribution technologies such as Google Analytics 4 / Google Site Kit and Sourcebuster (where active). Non-essential cookies are loaded only after You accept them through our cookie banner or, where applicable, after we determine that no opt-out preference signal has been received from Your browser.

Global Privacy Control. We honor the Global Privacy Control (GPC) browser signal as a request to opt out of any sale or sharing of Your personal information, including cross-context behavioral advertising via cookies and similar technologies. If Your browser sends a GPC signal (HTTP `Sec-GPC: 1` header or the `navigator.globalPrivacyControl` JavaScript property), we will treat that signal as Your opt-out and will not load non-essential third-party trackers, regardless of whether You have interacted with our cookie banner. We honor GPC even where applicable state-privacy-law thresholds do not require us to, as a matter of policy.

"Do Not Sell or Share My Personal Information." A "Do Not Sell or Share My Personal Information" link is published in the Website footer. Activating that link submits an opt-out request without requiring You to create an account or sign in.

Changing Your preferences. You can change Your cookie preferences at any time via the "Cookie Settings" link in the Website footer. You can also disable cookies through Your browser settings, but disabling strictly necessary cookies may impair Website functionality.

No session-replay or social pixels. We do not knowingly load session-replay tools (such as FullStory or Hotjar) or social-network pixels (such as Meta Pixel or TikTok Pixel) on the Website. If You observe such a script, please report it to support@fusionindicators.com.

7. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy and to satisfy legal, accounting, tax, operational, security, fraud-prevention, chargeback, and dispute-resolution obligations. We state retention windows below as categorized minimums anchored to specific legal and operational purposes; in many cases longer retention is required by law or reasonably necessary, in which case we will retain the data for that longer period.

CategoryMinimum retentionPurpose
Account, subscription, billing, invoice, and sales-tax recordsAt least seven (7) years from the end of the calendar year of the transactionIRS recordkeeping under Publication 583 conservative period (covering the 6-year underreporting case plus a margin); Indiana sales-tax assessment limitations under Ind. Code § 6-8.1-5-2 (3 years standard, 6 years substantial underreporting, indefinite for fraud); general state and federal tax-audit defense
Licensing and activation recordsDuration of the license plus three (3) yearsLicense-key revocation audit trail; dispute resolution; machine-limit and abuse-prevention records
Refund requests, refund events, chargeback records, and access-reversal recordsAt least twenty-four (24) months from the refund or chargeback event, and for as long as reasonably necessary for tax, audit, fraud-prevention, and dispute-resolution purposes (typically aligned with the seven (7)-year tax-record window above)Card-network dispute window (Visa allows up to 540 days for recurring-billing disputes; Mastercard comparable); representment, pre-arbitration, and arbitration cycles; IRS retention overlay
Stripe customer IDs and Stripe card fingerprints used for repeat-refund identificationFor as long as Your account exists, plus seven (7) years thereafterFraud and abuse prevention; enforcement of the one-completed-refund-per-customer rule in the Refund Policy
Support tickets and related attachmentsThree (3) years from closureRecurrence and pattern analysis; warranty and dispute support
Postmark transactional email message contentForty-five (45) days (Postmark default)Email troubleshooting; bounce and complaint analysis
Postmark suppression list (bounces, spam complaints, unsubscribes)IndefiniteSender-reputation hygiene per Postmark’s published policy
Web analytics (aggregated/de-identified)Up to twenty-four (24) monthsProduct analytics; trend analysis
Security logs (Wordfence, server logs)Up to twelve (12) monthsIncident response; fraud and abuse detection

We may retain limited records after deletion requests where required or permitted for legal, security, billing, refund, chargeback, fraud-prevention, tax, or accounting purposes, consistent with the exceptions in Cal. Civ. Code § 1798.105(d) and comparable provisions of other applicable consumer-privacy statutes.

7A. California Residents – CCPA/CPRA Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, provides specific rights and disclosures.

Categories of personal information we collect in the past 12 months may include:

Sources include information provided directly by you, information collected automatically from your browser, device, and software, and information received from commerce, payment, licensing, hosting, analytics, email, security, and support providers.

Business purposes for collection and disclosure include providing the services, activation and licensing, billing and subscription management, refund processing, fraud prevention, security, support, product improvement, and legal or regulatory compliance.

Categories of third parties to whom we may disclose information include payment processors, hosting and infrastructure providers, commerce and subscription providers, analytics and security providers, communications providers, professional advisers, and regulators or law enforcement when required.

We do not sell personal information for monetary consideration. To the extent "sharing" under CPRA includes cross-context behavioral advertising via cookies or similar technologies on our site, you may opt out through a do-not-sell-or-share mechanism or equivalent tool we publish.

Subject to verification and applicable exceptions, California residents may have rights to know, delete, correct, opt out of sale or sharing, limit certain sensitive-personal-information uses, and receive non-discriminatory treatment for exercising those rights.

To exercise rights, email support@fusionindicators.com. Authorized agents may submit requests on your behalf, subject to verification and your written confirmation where required.

7B. European Union and United Kingdom Residents – GDPR / UK-GDPR Rights

If you are located in the European Economic Area, the United Kingdom, or Switzerland, GDPR and UK GDPR provide specific rights and disclosures.

Controller. Fusion Indicators LLC is the controller of personal information collected through the website, account, and software.

Legal bases for processing. We process personal information on one or more of the following legal bases:

International transfers. Personal information may be transferred to and processed in the United States and other jurisdictions. Where we transfer personal information from the EEA, UK, or Switzerland to a country that has not received an adequacy decision, we rely on Standard Contractual Clauses, the UK International Data Transfer Addendum where applicable, or another lawful transfer mechanism. Copies of applicable safeguards are available on request at support@fusionindicators.com.

Rights. Subject to verification and applicable exceptions, you may have rights to access, rectify, erase, restrict processing, data portability, object to processing based on legitimate interests, withdraw consent where processing is based on consent, and lodge a complaint with a supervisory authority.

Data Protection Officer. Fusion Indicators LLC has not appointed a statutory Data Protection Officer because such appointment is not currently required based on the present scope of processing. Privacy inquiries may be directed to support@fusionindicators.com.

8. Security

We use reasonable administrative, technical, and organizational measures to protect information. However, no method of transmission, storage, or security control is guaranteed to be completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your own devices, accounts, credentials, license keys, local runtime environment, exported files, and trained models.

In the event of a data breach affecting your personal information, we will notify you and applicable regulators as required by applicable law.

9. Your Choices and Rights

Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, or portability of certain personal information, or to object to or limit certain processing.

You may also be able to:

We may need to verify your identity and may retain certain information where required for legal, security, billing, refund, chargeback, fraud-prevention, or operational reasons.

10. Third-Party Links and Services

Our website or software may link to third-party sites, payment portals, documentation, brokers, prop firms, market-data providers, or other services. We are not responsible for the privacy practices of third parties, and their own terms and privacy policies apply to your use of their services.

11. Children

Our products and services are not directed to children, and we do not knowingly collect personal information from children under 13, or under 16 in the EU, in violation of applicable law. If you believe we have inadvertently collected such information, contact support@fusionindicators.com and we will promptly delete it where required.

12. International Use

If you access our services from outside the United States, you understand and consent that your information may be processed and stored in the United States and other jurisdictions where we or our providers operate, subject to applicable law and the safeguards described in this Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted with a revised effective date and, where applicable, a revised last-updated date. Your continued use of the website or services after an update may constitute acceptance of the revised policy to the extent permitted by law.

14. Contact Us

Fusion Indicators LLC
Privacy: support@fusionindicators.com
Support: support@fusionindicators.com
Website: https://fusionindicators.com/