Privacy Policy

Draft for review by your lawyer before launch (GDPR). Replace the bracketed details.

Controller: [company legal name], Cyprus. Contact: [privacy email].

What we collect

• Account data: email address, name, and the ID of any Google or X account you sign in with.
• Your alerts and the reports generated for them.
• Billing data handled by Stripe. We never see or store your full card number.
• Security logs: IP address and sign-in times.
• Questions you ask the assistant and its answers, used to improve the service.

Why

To provide the service (contract), secure it (legitimate interest) and meet legal obligations such as tax records.

Processors

Hosting: DigitalOcean. Payments: Stripe. Email: Mailjet. AI processing of alert topics: xAI and Google. [Add any others.]

Retention

We keep your data while your account exists. Deleting your account in Account settings removes your account and alerts; billing records are kept as required by law.

Your rights

You can access, correct, export or delete your data, and complain to the Cyprus Commissioner for Personal Data Protection.

Cookies

We use one essential session cookie to keep you signed in. No advertising cookies.