1. Data Controller
Verdano is the data controller for personal data collected through this platform. For any privacy-related enquiry, contact [email protected].
2. Data We Collect and Why
| Data | Purpose | Lawful Basis |
|---|---|---|
| Email address | Account creation, login, service delivery | Contract (Art. 6(1)(b)) |
| Portfolio, watchlist, journal entries | Delivering research features | Contract (Art. 6(1)(b)) |
| Login timestamps | Security, service quality | Legitimate interest (Art. 6(1)(f)) |
| Page navigation log (path, account ID, timestamp) | Product improvement, identifying broken or unused flows | Legitimate interest (Art. 6(1)(f)) |
3. Data Retention
- Account data: duration of account + 30 days post-deletion
- Support communications: 3 years
- AI/LLM interaction logs (if stored): deleted within 90 days
4. Your Rights Under GDPR
You have the right to:
- Access your data (Art. 15)
- Correct inaccurate data (Art. 16)
- Erasure / “right to be forgotten” (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to legitimate-interest processing (Art. 21)
We will respond within 30 days. To exercise any right, email [email protected].
5. Cookies
We use strictly necessary cookies only — to maintain your login session. These are exempt from consent requirements under the ePrivacy Directive. We do not currently use analytics, advertising, or tracking cookies. If this changes, we will update this policy and obtain your consent.
6. Third-Party Processors
- Hosting: Railway
- Email delivery: Resend (magic-link auth and feedback forwarding)
- AI research: third-party AI providers process only public financial data (stock prices, financials, news) to generate research summaries — no personal user data is transmitted to AI providers
7. Data Requests
To request a copy of your data or account deletion, email [email protected]. We will fulfil requests within 30 days.