Privacy

[Legal name of the business], [Registered address], is responsible for your data. Questions or requests: [contact email address].

• Account: your name, email address, a one-way hash of your password, and, if you turn on two-factor, its secret and backup codes, encrypted.
• Sign-ins: for each device you're signed in on, its IP address, browser description and when it was last used, so you can see and sign out devices.
• Billing: your Stripe customer number and the state of your plan. Your card and billing address are held by Stripe, not by us.
• Channels: where flares go: your Telegram chat id, or the Slack or Discord webhook you chose. These are stored encrypted. For email we use your account address.
• Deliveries: which flare went to which of your channels, when, and whether it arrived.
• Admin actions: when an admin changes something on your account, a log of who did what and when.

The signals themselves come from public Google search trends and market prices. They contain nothing about you.

• To provide the service you signed up for: your account, flares and billing (performance of the contract).
• To keep invoices for as long as tax law requires (legal obligation).
• To keep accounts secure and prevent abuse: sign-in data, rate limits, the admin log (legitimate interest).

We don't sell your data, show ads, or use it to profile you.

• Cloudflare runs the website and app.
• Neon hosts the database, in the EU.
• Stripe takes payments and keeps invoices.
• Resend sends our emails.
• Telegram, Slack and Discord carry flares, but only if you connect them.

Some of these companies are based in the United States. Where data leaves the EU, it is covered by the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

• Your account and channels: until you delete your account.
• Accounts whose email was never confirmed: deleted after 7 days.
• Delivery records: 12 months.
• Ended sign-in sessions and expired links: removed within a day.
• Invoices: as long as tax law requires, at Stripe.

We only use cookies the service can't work without: to keep you signed in, to remember a device you trusted for two-factor, and to protect the Slack and Discord connection step. No analytics, no advertising, no tracking, so there is nothing to consent to and no cookie banner.

You can ask to see the data we have about you, correct it, take it with you, or have it deleted; and you can object to how we use it. Most of this you can do yourself: change your name and email under Account, and delete everything under Account, Security. For the rest, email [contact email address]; we answer within a month.

If you think we handle your data wrongly, you can complain to [Data-protection authority, e.g. Autoriteit Persoonsgegevens].

If this policy changes in a way that matters to you, we email you before the change applies.