Privacy Policy

Controller

The controller for the processing described here is Christopher David, Emsdettener Str. 10, 48268 Greven, Germany. Data protection contact: info@alphamacroinsider.com.

We have not appointed a Data Protection Officer, as we are not required to.

If you just read the site

You can use the public pages without an account and without giving us anything. Our hosting provider processes standard server request data (IP address, timestamp, requested URL, referrer, user agent) to deliver pages and to defend against abuse. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.

We use Vercel Web Analytics for aggregate visit counts. It is cookieless and does not build a cross-site or cross-session profile of you. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.

Our web font is served from our own domain. It is bundled at build time, so your browser makes no request to Google or any other font host when you visit.

If you create an account

We store, for as long as your account exists:

• your email address, and authentication metadata such as sign-in timestamps;
• your watchlist — which assets you follow;
• your alert preferences and any alert rules you define;
• a log of alerts already sent to you, so we do not send the same one twice;
• subscription status, if you subscribe to a paid plan.

Legal basis: performance of a contract, Art. 6(1)(b) GDPR. We do not sell your data, do not share it for advertising, and do not send marketing email.

Cookies

We set only what is strictly necessary to keep you signed in. These are session and refresh-token cookies set by our authentication provider; deleting them signs you out. We do not use advertising, tracking, or profiling cookies, which is why you are not being shown a consent banner.

Email we send you

If you enable alerts, we send a daily digest to your account email through our email provider, which receives your address and the message content in order to deliver it. Alert emails are part of the service you asked for; you can turn them off at any time in your account settings.

If you request an asset

The asset-request form asks for a ticker and, optionally, your email so we can follow up. We keep the request so we can act on it. Providing an email is voluntary — legal basis: consent, Art. 6(1)(a) GDPR, withdrawable at any time.

Processors and where data is stored

• Supabase — database and authentication. Our database instance is hosted in the United States (AWS us-west-2).
• Vercel — application hosting and cookieless analytics.
• Resend — transactional and alert email delivery.
• Payment provider — if you subscribe, our merchant of record processes your payment and holds the billing data required for it. We never receive or store your card details.

Some of these providers are established in, or process data in, the United States. Transfers take place on the basis of the European Commission’s standard contractual clauses and/or the EU–US Data Privacy Framework, as applicable to each provider, together with a data processing agreement.

We do not send any personal data to AI or language-model providers. The automated content tooling in this project operates on market figures only.

Retention

Account data is kept while your account exists and is deleted when you delete it. Sent- alert records are kept for the same period, since their only purpose is de-duplication. Asset requests are kept until resolved. Where statutory retention periods apply — typically to billing records under tax law — data is retained for that period and otherwise restricted from use.

Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection to processing based on legitimate interest (Art. 21). Where processing rests on consent, you can withdraw it at any time without affecting the lawfulness of what came before.

Write to info@alphamacroinsider.com to exercise any of these. To delete everything, ask us to delete your account and we will remove the data described above.

You also have the right to lodge a complaint with a supervisory authority, in particular the data protection authority of your German federal state, or the authority where you live or work.

Changes

If we change what we collect or who processes it, we update this page and move the effective date. Material changes affecting account holders are notified by email.