Sign in

Privacy Policy

Last updated: 1 November 2026  ·  Applies to all VegaSignal services

1. Who We Are

VegaSignal (vegasignal.com) is the brand under which the Platform operator provides this service. The operator is the data controller responsible for personal data collected through the Platform under the UK GDPR and the Data Protection Act 2018.

Data controller contact: privacy@vegasignal.com

2. Information We Collect

We collect only the minimum information necessary to operate and improve the service:

  • Account data: Email address and display name when you register
  • Usage data: Watchlist symbols, alerts, and scan preferences you configure
  • Technical data: API usage logs, error logs, and session identifiers (for debugging and rate limiting)
  • Payment data: Billing information is handled by our payment processor — we do not store full card details

We do not collect any trading account credentials, brokerage data, or portfolio holdings.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract performance: To provide the services you have subscribed to
  • Legitimate interests: To improve the platform, prevent abuse, and ensure security
  • Consent: Optional guest visit analytics, which you can disable below at any time
  • Legal obligation: To comply with applicable laws and regulations
  • Consent: For optional communications such as product newsletters (you can withdraw at any time)

4. How We Use Your Information

  • To create and manage your account
  • To deliver gem alerts, watchlist analysis, and market intelligence
  • To enforce API rate limits and plan quotas
  • To diagnose technical issues and improve the platform
  • To send essential service communications (account changes, security alerts)
  • To comply with legal and regulatory obligations

We do not trade, rent, or share your personal data with third parties for marketing purposes.

5. Third-Party Data Sources

Market data (stock prices, fundamentals, news) is sourced from Financial Modeling Prep (FMP). When you look up a symbol, that query is sent to FMP's API. Please review FMP's Privacy Policy for details on their data practices.

We do not share your personal information with FMP beyond anonymous API requests.

6. Data Storage and Security

Your data is stored in a secure SQL Server database hosted in a private cloud environment. We implement:

  • HTTPS encryption for all data in transit
  • Encryption at rest for the database
  • Access controls limiting who can access production data
  • Regular security reviews and dependency updates

No system is 100% secure. In the event of a data breach that affects your rights, we will notify you within 72 hours as required by UK GDPR.

7. Cookies

We use essential cookies to keep you logged in and maintain your session. With your permission, we also use first-party browser storage for optional guest visit statistics. We do not use:

  • Advertising or tracking cookies
  • Third-party analytics cookies (e.g. Google Analytics)
  • Cross-site tracking technologies

Your theme preference (light/dark) is stored in your browser's local storage — this is not sent to our servers.

Optional analytics records visits to public pages, page-view counts and broad source categories such as Google or Reddit. It uses random browser and visit identifiers, not your name, email address, IP address, full referrer URL, search query or device fingerprint. It is not joined to your account or private bot activity. Signed-in page views are excluded.

Analytics is off until you allow it. A visit starts again after 30 minutes of inactivity; a browser identifier expires after 30 days. A new identifier does not necessarily mean a new person. Raw guest statistics expire after 30 days of visit inactivity. We remember your choice for up to six months. Disabling analytics stops future collection and clears these analytics identifiers from your browser; it does not affect essential sign-in cookies. Browser privacy signals are respected.

Optional visit analytics: Not checked yet. Your choice does not affect access to VegaSignal.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion:

  • Your personal data will be deleted within 30 days
  • Anonymised usage logs may be retained for up to 12 months for security and fraud prevention
  • Data required by law (e.g. financial records) may be retained for up to 7 years

9. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

  • Access — request a copy of the personal data we retain about you
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Restriction — request that we limit how we use your data
  • Portability — receive your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interests
  • Withdraw consent — at any time, for processing based on consent

To exercise any right, email privacy@vegasignal.com. We will respond within 30 days. You also have the right to lodge a complaint with the ICO (Information Commissioner's Office).

10. International Transfers

Your data is stored and processed within the UK and EEA. If we ever transfer data outside these regions, we will ensure appropriate safeguards are in place (such as Standard Contractual Clauses) in accordance with UK GDPR requirements.

11. Changes to This Policy

We may update this policy periodically. We will notify registered users of material changes via email or an in-app notice at least 14 days in advance. The "last updated" date at the top of this page will always reflect the most recent revision.

12. Contact Us

For any privacy-related enquiries or to exercise your rights:

📧 privacy@vegasignal.com