Privacy policy
Last updated [date]
Draft for legal review (GDPR / AVG).
Controller
GhostTrader, [business address — to be completed]. Contact: support@ghosttrader.cc.
What we collect and why
- Account data (name, email, password hash via our auth provider) — to provide your account. Basis: contract.
- Order and payment data (order contents, amounts, payment status; card/bank details stay with the payment provider) — to deliver purchases and meet tax obligations. Basis: contract, legal obligation (7-year retention under Dutch tax law).
- Usage of the trading lab (paper trades, backtests, AI analyses you request) — to provide the feature. Basis: contract.
- Security logs (hashed IP address, download and login events) — to prevent fraud and abuse. Basis: legitimate interest.
- Marketing emails — only with your consent; withdraw any time.
Processors
[Supabase (hosting, auth, storage — region [EU]), Vercel (hosting), Stripe and/or Mollie (payments), Resend (email), market data provider, Anthropic (AI analysis — only computed indicator values are sent, no personal data). List locations and transfer safeguards (SCCs / EU-US DPF).]
Retention
[Per category.]
Your rights
Access, rectification, erasure, restriction, portability and objection. You can also complain to the Autoriteit Persoonsgegevens.
Cookies
See the Cookie policy.