Privacy Policy
We collect the minimum needed to run a subscription service. No ad trackers, no data brokers, no selling of personal data — ever.
What we store about you
- Account: email address, a salted password hash (scrypt — the plaintext password is never stored), optional display name, and your subscription status. Payment details are handled entirely by Lemon Squeezy (merchant of record); we never see your card.
- Usage: your watchlist, and counters/thumbnails needed to enforce fair-use limits (e.g. daily AI request count). AI request logs store a hashed IP address (not the IP itself) for abuse prevention.
- Technical: standard server logs with IP addresses kept briefly for security and troubleshooting.
Legal basis (GDPR/RODO)
Contract performance (Art. 6(1)(b)) for account and subscription data; legitimate interest (Art. 6(1)(f)) for security logs and abuse prevention; your consent for any optional marketing email.
Your rights
You can request access, correction, export or deletion of your personal data at any time — deleting your account removes your email, watchlist and usage records (billing records that the merchant of record must retain by tax law are outside our control). Write to the address on the contact page and we will respond within 30 days.
Retention
Account data lives while your subscription is active or you hold an account; logs rotate within weeks. Aggregated, anonymised research metrics (insider transactions, backtest statistics) contain no personal data of subscribers and may be retained indefinitely.