Privacy policy

Account data

Email address and authentication credentials, to create and secure an account. Handled by Supabase Auth; passwords are never stored in readable form.

Organisation data

Organisation name and membership, to scope a workspace and control who can see it.

Billing data

Subscription state and a Stripe customer reference. Card details are collected and stored by Stripe and are never held by TradingSurv.

Messages you send us

The message, the address you ask us to reply to, and the page you were on when you opened the form. Kept so we can answer, and readable only by the operator: no session on this site, including yours, can read a message back. Nothing else about you is attached to it.

Product usage

Aggregate page performance and traffic analytics, used to find slow and broken pages.

Market data

Not personal data. Prices, load, generation and bid curves are published by exchanges and transmission system operators and relate to bidding zones, not to individuals.

Account, organisation and billing data are processed to perform the contract for the service. Analytics and security logging are processed on the basis of legitimate interests in keeping the service working and secure.

TradingSurv does not sell personal data, does not use it for advertising, and does not build profiles of individuals.

Account and organisation data are kept for as long as the account exists and are deleted on request or after closure. Billing records are kept for as long as tax and accounting law requires. Aggregate analytics are retained on the analytics provider’s own schedule and are not linked to individual accounts.

Messages sent through the contact form are kept while they are useful as a record of what was reported and answered, and are deleted on request.

The service runs on infrastructure operated by third parties who process data on our instructions: Supabase (managed Postgres and authentication), Vercel (application hosting and analytics), Cloudflare (data collection workers and object storage) and Stripe (payments). The application database is hosted in an EU region.

Under the GDPR and UK GDPR you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, portability, and you may object to processing carried out on the basis of legitimate interests. You may also complain to your national supervisory authority.

Requests are made through the contact form, or from the Contact us button on any page. State which right you are exercising and the account email it concerns. We will respond within one month.