DRAFT - must be reviewed by counsel (UK GDPR / GDPR and applicable US state privacy law) before commercial launch.
We do not collect payment data (none is taken yet), browsing analytics, or any data about you from third parties. Ticker profile data (sector, country, fund holdings) describes securities, not you.
All processing is done to provide the service you signed up for (performance of contract): computing risk scores for your portfolio and sending alerts you configured. We do not sell or share your data with anyone, and we do not use it for advertising.
Your data is kept while your account exists. Deleting your account (the
"Delete account" link in the dashboard header, or DELETE /me via the API)
immediately and permanently erases your account, portfolio, risk history, and
settings from the live database. Encrypted backups age out on a rolling
schedule (up to 7 days).
Data is stored in the application database on our server infrastructure and is not transferred to third parties, except that alert payloads you configure are sent to the webhook URL you provide.
Depending on your jurisdiction (including UK/EU GDPR), you may have rights to access, correct, export, or erase your data. The deletion right is built into the product; for anything else, contact us at the address below and we will respond within the statutory window.
If a breach affecting your personal data occurs, we will notify the applicable regulator and affected users within the legally required timeframe.
[operator legal name and contact email - fill in before launch]