In short. This website sets no cookies and runs no analytics. For subscribers we hold an account record, billing metadata and support correspondence — nothing more than running the subscription needs. We never sell personal data.
1. Overview
This policy describes how Target1M collects, uses, shares and protects personal data. We practise data minimisation: we collect the least we need to run the business, and we do not sell personal data to anyone.
2. What this policy covers
It covers the target1m.io website and the company-level data we
hold about subscribers — accounts, billing and support.
Each of our products handles data inside its own application and publishes its own privacy notice describing what it collects there. Where the two differ for in-product data, that product’s notice governs:
- TraderSpy — traderspy.app
- Ravenpost — ravenpo.st
Applications we publish to the app stores carry their own notice in the store listing and inside the app.
3. Who we are
The data controller is T1M LLC, trading as Target1M, a Wyoming limited liability company (Wyoming SOS filing 2026-001903276) with its registered address at T1M LLC, 30 N Gould St #46732, Sheridan, WY 82801, United States. For any privacy question or request, contact admin@target1m.io.
4. Data we collect
Website visitors. target1m.io is a static site.
There is no analytics script, no advertising pixel and no tracking. Our
hosting provider records standard server request logs — IP address, user
agent, requested URL and timestamp — for security and reliability. We do not
use these to profile or identify individuals.
The contact form. If you submit the form on our homepage we receive the name, email address and message you enter, plus the time of submission. It is handled by our hosting provider’s form service and emailed to us. A hidden anti-spam field discards automated submissions.
Account holders and subscribers. To run a subscription we hold an account record — typically name, email address, the product and plan, the subscription status and its renewal date — together with support correspondence and any settings tied to the account.
Billing data. Card payments are processed by our payment processor. We receive confirmation that a payment succeeded or failed, the amount, the invoice reference, and the card brand and last four digits. We never receive or store full card numbers, CVC codes or banking credentials. Invoices and payment records are retained for accounting and tax purposes.
Connected accounts. Where a product publishes on your behalf, it stores the access tokens you granted and the profile identifiers the network returns — see connected accounts.
5. What we don’t collect
- No special category data — health, biometrics, political opinions, religious beliefs and the like.
- No behavioural advertising, retargeting or cross-site tracking.
- No purchased or scraped prospect lists. We do not buy personal data from data brokers.
- No full payment card details or banking credentials.
- No brokerage, exchange or bank account credentials. Our analytics products read market data, not your accounts, and we never ask for trading credentials.
6. How we use data
- To create and run your account and deliver the product you subscribed to;
- To take payment, issue receipts and manage renewals, refunds and failed payments;
- To provide support and answer the questions you send us;
- To send service messages — payment confirmations, renewal notices, security notices and material changes to these policies;
- To keep our systems secure, prevent fraud and abuse, and enforce our terms;
- To meet legal, tax and accounting obligations; and
- To establish, exercise or defend legal claims where necessary.
We do not use your data for automated decision-making or profiling producing legal or similarly significant effects. Marketing email, if we ever send any, is opt-in and unsubscribable in one click.
7. Legal bases
Where the GDPR or comparable law applies, we rely on:
- Performance of a contract — to run your subscription and take payment for it.
- Legitimate interests — to answer enquiries, secure our systems, prevent abuse, and keep records of what was agreed. We have assessed that these do not override your rights.
- Legal obligation — to retain invoices and accounting records for the periods tax law requires.
- Consent — where we ask for it explicitly, such as optional marketing email. You can withdraw consent at any time.
8. Processors and third parties
We share personal data only with providers that process it on our instructions, under contract, and only as far as necessary:
- Website hosting, CDN and form handling — serves our sites, keeps the server logs described above, and delivers contact-form submissions.
- Application hosting and databases — runs the products and stores account data.
- Payment processing — handles card payments, subscriptions and invoicing. The processor is also an independent controller for its own fraud-prevention and regulatory purposes, under its own privacy policy.
- Transactional email — delivers receipts, renewal notices and support replies.
- Market data providers — supply the prices and market information our analytics products display. They receive no personal data about you.
- Accounting — our accountant, and tax authorities where the law requires.
- Self-hosted fonts — typefaces are bundled with this site and served from our own domain, so no font CDN sees your IP address.
We do not sell personal data and we do not share it with advertisers or data brokers. We may disclose data where compelled by valid legal process, and will notify you where lawfully permitted.
9. Connected accounts
Where a product publishes on your behalf, you connect each account yourself through that network’s official authorisation flow. We store the access token the network issues and the profile identifiers it returns, and we use them only to perform the actions you asked for inside the product.
We never receive your password for a connected network. You can disconnect any account at any time from inside the product, or revoke our access from the network’s own settings; we delete the stored token when you do.
10. Cookies and tracking
This website sets no cookies. There is no analytics script, no advertising pixel, no session tracking and no consent banner — because there is nothing to consent to.
Our products are logged-in applications and do use strictly necessary cookies or equivalent storage to keep you signed in and to keep your session secure. Each product’s own privacy notice describes what it sets and why.
11. Retention
- Enquiries that do not become subscriptions — deleted within 12 months.
- Account records — kept while the account is active, and deleted or anonymised within 12 months of the account being closed.
- Connected-account tokens — deleted as soon as you disconnect the account or close your account.
- Invoices and accounting records — kept for the period applicable tax law requires, typically 7 years. These cannot be deleted on request.
- Support correspondence — kept for 3 years.
- Server logs — retained on a short rolling window, typically no more than 30 days.
12. International transfers
T1M LLC is registered in the United States. Personal data you send us may be processed in the United States and in other countries where our personnel and service providers are located.
Where personal data is transferred out of the European Economic Area or the United Kingdom, the transfer is covered by an adequacy decision or by Standard Contractual Clauses with any additional safeguards required. You can ask us which mechanism applies to a particular provider.
13. Your rights
Subject to applicable law, you may request access to your personal data, ask for it to be corrected or erased, restrict or object to processing, receive it in a portable format, and withdraw consent where consent is the basis for processing.
Send requests to admin@target1m.io. We respond within 30 days and do not charge for a reasonable request. We may need to verify your identity first. Closing your account and deleting your data does not remove invoices we are legally required to keep. If our response does not satisfy you, you may complain to your local data protection authority.
14. Security
We apply measures appropriate to the risk: HTTPS everywhere, encryption in transit, hashed credentials, access control and multi-factor authentication on our administrative accounts, least-privilege access to production systems, encrypted devices, and prompt revocation of credentials when someone stops working on a system. No method of transmission or storage is perfectly secure and we cannot guarantee absolute security. If a breach affecting your personal data occurs, we will notify you and the relevant authority within the timeframes the law requires.
15. Children
Our subscription products are intended for adults and we do not knowingly collect personal data from anyone under 18 through them. This website is not directed at children either. If you believe a child has provided us with personal data, contact us and we will delete it. Where one of our consumer apps is directed at a general or family audience, its store listing and in-app notice set out its age rating and what it collects.
16. Changes
We may update this policy. The effective date at the top shows when the current version took effect. Where a change materially affects how we handle your data, we notify account holders by email before it takes effect.
17. Contact
For any privacy question, request or complaint, contact admin@target1m.io, or write to T1M LLC, 30 N Gould St #46732, Sheridan, WY 82801, United States.