Privacy Policy

Draft for review by your lawyer before launch (GDPR). Replace the bracketed details.

Controller: [company legal name], Cyprus. Contact: [privacy email].

What we collect

• Account data: email address, name, and the ID of any Google or X account you sign in with.
• Your alerts and the reports generated for them.
• Billing references only: your Stripe customer ID, each alert's subscription ID, status and renewal date, and a card fingerprint (a one-way code from Stripe) used only to give one free trial per person. Card numbers are handled entirely by Stripe — we never see or store them.
• No passwords: you sign in with Google, X or a one-time email link.
• Security and visit logs: IP address, approximate country, pages requested, browser type and sign-in times — kept 30 days (security events 90 days) to protect the service and understand use.
• Questions you ask the assistant and its answers, used to improve the service.

Why

To provide the service (contract), secure it (legitimate interest) and meet legal obligations such as tax records.

Processors

Hosting: DigitalOcean. Payments: Stripe. Email: Mailjet. AI processing of alert topics: xAI and Google. [Add any others.]

Retention

We keep your data while your account exists. Deleting your account in Account settings removes your account and alerts; billing records are kept as required by law.

Your rights

You can access, correct, export or delete your data, and complain to the Cyprus Commissioner for Personal Data Protection.

Cookies

We use one essential session cookie to keep you signed in. No advertising cookies.