Privacy Policy
Last updated: July 2026 · GDPR1. Who We Are
AI Market Analysts ("we", "our", "us") is an independent service operated from Cyprus. We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Cyprus law.
2. Data We Collect
Account data: Email address, nickname, hashed password (we never store plaintext passwords).
Usage data: AI session history, market queries, credit consumption (for plan enforcement).
Analytics data (with consent only): Via Google Analytics 4 — page views, session duration, approximate geographic region. IP addresses are anonymized before storage.
We do NOT collect: Payment card details, your real trading positions, or personal financial data. Payments are processed in cryptocurrency by our payment provider; we never receive or store your card or bank details.
3. Legal Basis for Processing (GDPR)
• Contract performance: Processing your email and account data to provide the Service.
• Legitimate interest: Session logs for debugging and service improvement.
• Consent: For EU/EEA visitors, analytics cookies are loaded only after explicit acceptance. For other regions, opt-out is available via the cookie banner.
4. Cookies
We use:
• Essential cookies: Authentication token stored in localStorage (necessary for login).
• Analytics cookies (optional): Google Analytics 4 — for visitors from the EU/EEA, UK, and Switzerland, activated only after your explicit consent. For visitors from other regions, analytics may be active by default; you can decline at any time via the cookie banner.
• Preference cookies: Theme mode (dark/light) stored in localStorage.
You can withdraw cookie consent at any time by clearing your browser's storage for this site or from your Settings page in the app.
5. Google Analytics
When accepted, we use Google Analytics 4 (GA4) to understand usage patterns and improve the Service. IP anonymization is enabled. Data is processed by Google LLC (USA) under Standard Contractual Clauses. You can opt out at any time via Google's opt-out browser add-on.
6. Data Retention
• Account and session data: Retained while your account is active.
• Upon account deletion: All data is permanently erased within 30 days.
• Analytics data: Retained for 14 months per Google's default, then automatically deleted.
7. Your Rights (GDPR)
You have the right to:
• Access your personal data
• Correct inaccurate data (via Settings)
• Delete your account and all associated data (via Settings → Security → Delete Account)
• Withdraw consent for analytics at any time
• Data portability — contact us to export your data
• Lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus, or your local EU supervisory authority
8. Data Security
All data is transmitted over HTTPS. Passwords are hashed using bcrypt. JWT authentication tokens expire after 7 days. We follow security best practices including rate limiting and input validation.
For data requests or GDPR inquiries, contact us at eugnvlkv@gmail.com.