Privacy policy

What personal data TradingSurv processes, why, how long it is kept, and the rights available under the GDPR and UK GDPR.

What we process

Account data
Email address and authentication credentials, to create and secure an account. Handled by Supabase Auth; passwords are never stored in readable form.
Organisation data
Organisation name and membership, to scope a workspace and control who can see it.
Billing data
Subscription state and a Stripe customer reference. Card details are collected and stored by Stripe and are never held by TradingSurv.
Product usage
Aggregate page performance and traffic analytics, used to find slow and broken pages.
Market data
Not personal data. Prices, load, generation and bid curves are published by exchanges and transmission system operators and relate to bidding zones, not to individuals.

Why we process it

Account, organisation and billing data are processed to perform the contract for the service. Analytics and security logging are processed on the basis of legitimate interests in keeping the service working and secure.

TradingSurv does not sell personal data, does not use it for advertising, and does not build profiles of individuals.

Retention

Account and organisation data are kept for as long as the account exists and are deleted on request or after closure. Billing records are kept for as long as tax and accounting law requires. Aggregate analytics are retained on the analytics provider’s own schedule and are not linked to individual accounts.

Processors

The service runs on infrastructure operated by third parties who process data on our instructions: Supabase (managed Postgres and authentication), Vercel (application hosting and analytics), Cloudflare (data collection workers and object storage) and Stripe (payments). The application database is hosted in an EU region.

Your rights

Under the GDPR and UK GDPR you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, portability, and you may object to processing carried out on the basis of legitimate interests. You may also complain to your national supervisory authority.

Requests are made to the contact address published on this site. We will respond within one month.

Read next

Privacy policy — TradingSurv