Privacy Policy

1. Data controller

InsiderTrades Sigma (the "Service") is operated by the Insiders Trades Sigma team, acting as data controller within the meaning of the General Data Protection Regulation (GDPR, EU 2016/679). Contact: contact@insiders-trades.com. Publisher identity is available on request at the same address (Art. 6 LCEN exemption, applicable to a non-professional natural-person publisher during the non-monetised private beta).

2. Data collected

• Email address (account creation, magic link, unsubscribe), basis: contract performance.
• Hashed password (bcrypt), basis: contract performance.
• Signed JWT session cookie (it_session), basis: legitimate interest (authentication).
• UI preferences (theme, locale), basis: legitimate interest.
• Server logs (IP, User-Agent, timestamp) retained 90 days, basis: legitimate interest (security).

3. Retention

Inactive accounts: deleted 24 months after last sign-in. Logs: 90 days. API tokens: until revoked by their owner.

4. Processors

• Vercel Inc. (hosting), data stored in the EU (Frankfurt).
• Neon Database (managed PostgreSQL), region eu-central-1 (Frankfurt).
• Resend (transactional email), DPA in place.
• OpenAI (issuer-page editorial enrichment), public issuer data only, never personal data.

5. Your rights

Under GDPR articles 15–22 you have the right of access, rectification, erasure, restriction, portability and objection. To exercise these rights, write to contact@insiders-trades.com. You may also lodge a complaint with the CNIL (cnil.fr) or your local supervisory authority.

6. Cookies

The Service uses one strictly-necessary cookie (it_session) for authentication. No third-party analytics cookies, no advertising cookies.