Privacy policy
1. Data controller
The controller of the personal data collected through gammatick.com is [Controller: full name or company name, address, tax / VAT number — to be completed]. For any privacy request write to support@gammatick.com.
2. What data we process
- Account data: first and last name, email, password (stored only as an irreversible hash), preferred language, TradingView username if you provide it.
- Sign-in with Google (or Apple): account identifier, email and name provided by the provider.
- Subscription: plan and subscription status; payment details are handled directly by the payment platform (Whop), not by us.
- Technical data: IP address and time of requests in server logs, sign-in sessions, email sending log (to prevent abuse).
- Communications: emails you send us for support.
3. Why and on what legal basis
- Providing the service and managing your account and subscription: performance of a contract (Art. 6(1)(b) GDPR).
- Sending service emails (account confirmation, password reset, service notices): performance of a contract.
- Security, abuse and fraud prevention, backups: legitimate interest (Art. 6(1)(f)).
- Tax and accounting obligations: legal obligation (Art. 6(1)(c)).
We don't use your data for advertising, we don't sell it and we don't profile you.
4. Who we share it with
We use providers that process data on our behalf as processors:
- Contabo GmbH (Germany): servers and database of the service, in the EU.
- Resend (United States, sending from EU infrastructure): service emails.
- Apple (iCloud Mail): the support@gammatick.com inbox.
- Google: only if you choose «Continue with Google».
- TradingView: the username you provide, to enable indicator access.
- Whop: payments and subscriptions, once available.
- Discord: only if you connect your account to the community channels.
Data may be disclosed to authorities where required by law.
5. Transfers outside the EU
Some providers are based in the United States. Such transfers rely on the EU-US Data Privacy Framework, where the provider is certified, or on the Standard Contractual Clauses approved by the European Commission.
6. How long we keep it
- Account: until you delete it; after deletion the data is removed from the database and disappears from backups within 30 days.
- Technical logs, expired sessions, expired email links and the sending log: up to 90 days.
- Tax records of purchases: for the period required by law (usually 10 years).
7. Your rights
You can request access, rectification, erasure, restriction and portability of your data and object to processing based on legitimate interest by writing to support@gammatick.com. You can edit your profile and delete your account yourself from the Account page. You also have the right to lodge a complaint with your data protection authority (in Italy: Garante per la protezione dei dati personali, garanteprivacy.it).
8. Security
The site only uses encrypted connections (HTTPS). Passwords are stored with a strong hashing algorithm (scrypt), links sent by email are single-use and expire, the database is not reachable from the Internet and server access is restricted and key-protected.
9. Minors and changes
The service is for adults only. We may update this policy; the current version is always on this page with the date of the last update.