Privacy Policy

1. Data controller

InsiderTrades Sigma (the "Service") is operated by the Insiders Trades Sigma team, acting as data controller within the meaning of the General Data Protection Regulation (GDPR, EU 2016/679). Contact: contact@insiders-trades.com. Publisher identity is available on request at the same address (Art. 6 LCEN exemption, applicable to a non-professional natural-person publisher during the non-monetised private beta).

2. Data collected

• Email address (account creation, magic link, unsubscribe), basis: contract performance.
• Email address and language for the newsletter, basis: consent confirmed by double opt-in. Confirmation and opt-out timestamps are retained as evidence.
• Hashed password (bcrypt), basis: contract performance.
• Signed JWT session cookie (it_session), basis: legitimate interest (authentication).
• UI preferences (theme, locale), basis: legitimate interest.
• Server logs (IP, User-Agent, timestamp) retained 90 days, basis: legitimate interest (security).
• Insider names, roles and transactions published by regulators and issuers, basis: legitimate interest in aggregating, checking and analysing official financial information. Source, date and context remain attached to the data.

3. Retention

Inactive accounts: deleted 24 months after last sign-in. Logs: 90 days. API tokens: until revoked by their owner. Newsletter subscriptions: until unsubscribe, then opt-out evidence is retained for three years before deletion.

4. Processors

• Vercel Inc. (hosting), data stored in the EU (Frankfurt).
• Neon Database (managed PostgreSQL), region eu-central-1 (Frankfurt).
• Resend (transactional email and consented newsletter), DPA in place.
• OpenAI (editorial enrichment), may process professional data already made public by an official source, such as a name, role, company, date and amount.

5. Your rights

Under GDPR articles 15 to 22 you have the right of access, rectification, erasure, restriction, portability and objection. To exercise these rights, write to contact@insiders-trades.com. You may also lodge a complaint with the CNIL (cnil.fr) or your local supervisory authority.

6. Cookies

The Service uses one strictly-necessary cookie (it_session) for authentication. No third-party analytics cookies, no advertising cookies.