⌕ ⌘K
Not financial advice MARKET CLOSED · 20:32 ET LIVE · IEX
← BACK

PRIVACY POLICY

1. CONTROLLER

VEXARIUM
Lê Quốc Anh Trần
Glogauer Str. 11, 90473 Nürnberg, Germany
E-Mail: lequocanhtr@gmail.com

Controller of your personal data within the meaning of the GDPR (Art. 4 No. 7 GDPR).

2. DATA WE COLLECT & LEGAL BASIS

We process personal data only to the extent necessary to provide the service.

  • Account (email + password hash) — to create and manage your account (Art. 6(1)(b) GDPR). Passwords are stored as salted bcrypt hashes, never in plaintext.
  • Saved trades / portfolio entries — to provide the portfolio feature you request (Art. 6(1)(b) GDPR).
  • Subscription & payment — processed by Stripe on your behalf; we receive only the subscription status (Art. 6(1)(b)/(f) GDPR).
  • AI analysis — the symbol/indicator data you request is sent to our LLM provider to generate the analysis you asked for (Art. 6(1)(b)/(f) GDPR).
  • Server logs — IP address, timestamps, and request metadata for security, abuse prevention, and rate limiting (Art. 6(1)(f) GDPR, legitimate interest in operating a secure service).

3. BROWSER STORAGE (NO COOKIES)

VEXARIUM sets no cookies. It stores strictly-necessary data in your browser's localStorage to make the service work:

  • vexarium_token / vexarium_user — your session token and account tier, so you stay logged in.
  • vexarium_trades — your saved trades (portfolio).
  • vexarium_recent — your recent analyses.
  • vexarium_consent_v1 — records that you acknowledged this disclosure.

These are strictly necessary for the functionality you request (TTDSG §25(2) No. 2). No advertising, tracking, or analytics cookies are used.

4. THIRD-PARTY PROCESSORS

We use the following processors to host and operate the service:

  • Render (USA) — application hosting.
  • Neon (Frankfurt, EU) — PostgreSQL database.
  • Upstash (EU/USA) — Redis cache and rate limiting.
  • Cloudflare (USA) — frontend hosting and CDN.
  • Stripe (USA) — payment processing.
  • Alpaca (USA) — market data.
  • LLM provider (ollama-cloud) — AI analysis generation.

5. INTERNATIONAL TRANSFERS

Some processors are located outside the European Economic Area (primarily the USA). Where personal data is transferred to a third country, we rely on appropriate safeguards under Art. 44–49 GDPR, including the EU–US Data Privacy Framework (for certified US providers) and/or the European Commission's Standard Contractual Clauses.

6. RETENTION

We retain account data and saved trades for as long as your account is active. AI analysis results are cached per symbol per day and discarded automatically. Server logs are retained for a limited period (typically up to 30 days) for security purposes. You may delete your saved trades at any time; account deletion is available on request.

7. YOUR RIGHTS (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access the personal data we hold about you (Art. 15 GDPR).
  • Request correction of inaccurate data (Art. 16 GDPR).
  • Request deletion of your data (Art. 17 GDPR).
  • Restrict or object to processing (Art. 18, 21 GDPR).
  • Data portability (Art. 20 GDPR).
  • Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint with your supervisory authority, in Germany the Bayerische Landesamt für Datenschutzaufsicht (BayLDA).

8. CONTACT

To exercise any of your rights or for any privacy question, contact us at lequocanhtr@gmail.com.