Legal
Last updated: January 15, 2025
Privacy policy
& GDPR.
We take your privacy seriously. This policy explains how we collect, use, and protect your personal data in compliance with GDPR and other applicable privacy regulations.
Data we collect
Account information
When you create an account, we collect your name, email address, and password (encrypted). This information is necessary to provide you with our services.
Usage data
We automatically collect information about how you use our platform, including pages visited, features used, and time spent on the service. This helps us improve your experience.
Financial preferences
Information about your investment interests, watchlists, and preferences to personalize your experience and provide relevant recommendations.
Technical data
Device information, browser type, IP address, and cookies to ensure security and optimal performance of our platform.
How we use your data
Service provision
To provide, maintain, and improve our AI-powered stock analysis services, including generating personalized scores and recommendations.
Communication
To send you important updates about your account, service changes, and optional marketing communications (with your consent).
Security
To detect, prevent, and address technical issues, fraud, and security breaches to protect your account and our platform.
Analytics
To understand usage patterns and improve our services. All analytics data is aggregated and anonymized.
Your GDPR rights
Right to access
You have the right to request a copy of all personal data we hold about you. We will provide this within 30 days of your request.
Right to rectification
You can request correction of any inaccurate personal data we hold about you.
Right to erasure
You can request deletion of your personal data ('right to be forgotten'). We will comply unless we have a legal obligation to retain it.
Right to portability
You can request your data in a structured, machine-readable format to transfer to another service.
Right to object
You can object to processing of your personal data for direct marketing or legitimate interests.
Right to restrict processing
You can request we limit how we use your data while complaints are being resolved.
Data security
Encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Your password is hashed using industry-standard algorithms.
Access controls
Strict access controls ensure only authorized personnel can access personal data, and only when necessary for their role.
Regular audits
We conduct regular security audits and penetration testing to identify and address potential vulnerabilities.
Incident response
We have a comprehensive incident response plan and will notify affected users within 72 hours of any data breach.
Data sharing & transfers
Third-party services
We use carefully selected third-party services (payment processors, analytics, cloud hosting). All partners are GDPR-compliant and bound by data processing agreements.
International transfers
When data is transferred outside the EEA, we ensure adequate protection through Standard Contractual Clauses or equivalent mechanisms.
No data selling
We never sell your personal data to third parties. Your information is used solely to provide and improve our services.
Data retention
Active accounts
We retain your data for as long as your account is active and you continue to use our services.
Account deletion
Upon account deletion request, we remove personal data within 30 days, except where legally required to retain it.
Legal requirements
Some data may be retained longer for legal, tax, or regulatory compliance (typically 7 years for financial records).
Data protection officer
Questions about your privacy?
If you have any questions about this policy or want to exercise your rights, write to us. We respond within 48 hours.