Privacy Policy
Effective Date: [Insert Date of Last Update, e.g., 27 May 2025]
1. Introduction and Who We Are
Welcome to [Your Service Name] ("Service"). This Privacy Policy explains how [Your Company Name/Legal Entity, "we", "us", "our"], as the data controller, collects, uses, shares, and protects your personal information when you use our Service. We are committed to protecting your privacy and handling your data in an open and transparent manner, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Our contact details are:
[Your Company Full Legal Name]
[Your Registered Address]
Email for privacy inquiries: [Your Privacy Email Address, e.g., [email protected]]
2. What Information We Collect and Why
We collect personal information to provide and improve our Service, manage your account, and ensure a secure experience. The types of information we collect, the purposes, our legal basis for processing, and retention periods are outlined below:
| Personal Data Collected | Purpose of Collection | Legal Basis for Processing (GDPR) | Storage Period |
|---|---|---|---|
| User ID / Email Address | Account creation, management, authentication, and communication (e.g., service updates, support) | Performance of a contract (to provide you with the service you signed up for); Legitimate interest (for security and service communications). | For the duration of your account and for 6 months after account termination, unless a longer period is required by law or for legitimate business needs (e.g., resolving disputes). |
| Entered securities codes | Providing AI-powered stock analysis services as requested by you. | Performance of a contract (to provide the core service functionality). | 30 days from entry to allow for service provision and short-term review. |
| Access logs (including IP address, browser type, access times) | Ensuring the security and integrity of our Service, preventing fraud, troubleshooting, and service improvement (e.g., understanding user traffic patterns). | Legitimate interest (to maintain service security and stability, and to improve our service); Legal obligation (in some cases, for security incident reporting). | 90 days for security and operational purposes, unless required for an ongoing investigation. |
| Device information (e.g., operating system, device model - if collected) | Service optimization for different devices, improving user experience. | Legitimate interest (to ensure our service functions correctly on various devices). | During your active session or as long as necessary for optimization purposes. |
We do not collect special categories of personal data (e.g., health, racial or ethnic origin) unless you voluntarily provide it and it is strictly necessary for a specific purpose for which we will obtain your explicit consent.
3. Use of Cookies and Similar Technologies
We use cookies and similar tracking technologies to enhance your user experience, analyze service usage, and for operational purposes. Cookies are small text files stored on your device.
- Essential Cookies: These are necessary for the Service to function (e.g., session cookies, authentication). These do not require your consent but are used based on our legitimate interest to provide a functional website.
- Analytical/Performance Cookies: These help us understand how users interact with our Service, allowing us to improve its performance. We will ask for your consent before placing these cookies.
- Functional Cookies: These remember your preferences (e.g., language) to enhance your experience. We will ask for your consent before placing these cookies.
You can manage your cookie preferences through our cookie consent banner and/or your browser settings. Disabling certain cookies may affect the functionality of the Service. For more detailed information, please see our [Link to Cookie Policy, if separate].
4. How We Use Your Information
In addition to the purposes listed in Section 2, we use your information to:
- Provide, operate, and maintain our AI-powered stock analysis services (Legal Basis: Performance of a contract).
- Send you important notifications, respond to your inquiries, and provide customer support (Legal Basis: Performance of a contract; Legitimate interest).
- Improve service quality, develop new features, and conduct research and analysis (Legal Basis: Legitimate interest; Consent for specific research if identifiable data is used).
- Prevent unauthorized use, fraud, and ensure the security of our Service and users (Legal Basis: Legitimate interest; Legal obligation).
- Comply with legal obligations and enforce our terms and conditions (Legal Basis: Legal obligation; Legitimate interest).
5. Sharing Your Information with Third Parties
We do not sell your personal information. We may share your personal information with third parties only in the following circumstances:
- With Your Consent: We will share information with third parties when we have your explicit consent to do so.
- Service Providers (Data Processors): We engage trusted third-party companies and individuals to perform services on our behalf (e.g., hosting providers, analytics services, customer support tools). These processors are contractually bound to protect your data and only process it based on our instructions and for the purposes specified. We ensure Data Processing Agreements (DPAs) are in place.
- Legal Requirements: If required by law, regulation, legal process, or governmental request (e.g., a court order or subpoena). We will endeavor to notify you unless prohibited by law.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such deal and outline your choices.
- Protection of Rights: To protect our rights, property, or safety, or the rights, property, or safety of our users or others.
6. International Data Transfers
Your information may be processed in countries outside of your country of residence, including outside the European Economic Area (EEA), by us or our service providers. Where we transfer personal data outside the EEA, we will ensure that appropriate safeguards are in place to protect your personal information in accordance with GDPR requirements. These safeguards may include:
- Transferring to countries deemed to provide an adequate level of data protection by the European Commission.
- Using Standard Contractual Clauses (SCCs) approved by the European Commission.
- Other lawful transfer mechanisms.
For more information on the safeguards in place, please contact us.
7. Information Security
We implement appropriate technical and organizational security measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include encryption, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure.
Access to personal information is restricted to authorized employees, contractors, and agents who need to know that information in order to process it for us, and who are subject to strict contractual confidentiality obligations.
8. Your Rights Under GDPR
If you are within the European Economic Area (EEA) or other regions with similar data protection laws, you have the following rights regarding your personal information:
- Right to Access: You can request a copy of the personal information we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete personal information.
- Right to Erasure ('Right to be Forgotten'): You can request deletion of your personal information under certain conditions (e.g., if it's no longer necessary for the purpose it was collected).
- Right to Restrict Processing: You can request that we limit the processing of your personal information under certain circumstances.
- Right to Data Portability: You can request to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
- Right to Object: You can object to the processing of your personal information based on our legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where we rely on your consent for processing, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
- Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (unless certain conditions apply). We will inform you if such processing occurs.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority (data protection authority) in your country of residence if you believe our processing of your personal information infringes GDPR.
To exercise any of these rights, please contact us at [Your Privacy Email Address, e.g., [email protected]]. We will respond to your request within one month, or provide an explanation if we require more time.
9. Contact Information
For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
[Your Company Full Legal Name]
[Your Registered Address]
Email: [Your Privacy Email Address, e.g., [email protected]]
10. Policy Changes
- We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.
- If we make significant changes, we will notify you through an announcement on our Service, by email, or as otherwise required by applicable law, prior to the change becoming effective. We encourage you to review this Privacy Policy periodically.