Privacy Policy
Last updated [not yet in force — draft]
We collect the email you sign up with, the cards you put in your portfolio, and basic usage data. We use them to run the Service and to send what you ask for. We do not sell your data. You can export or delete everything at any time.
1Who is responsible for your data
The controller is PikaBreeze, a sole proprietorship at 3301 Innovation Way, Fremont, CA, United States. For anything in this policy, including a request to see or delete your data, write to seaking@slabindex.gg.
2What we collect, and why
| Data | Why | Lawful basis |
|---|---|---|
| Email address | Your account, service notices, password resets | Contract |
| Portfolio contents | To show you your collection, its value and its analysis | Contract |
| Subscription and billing records | Taking payment, tax and accounting records | Contract / legal obligation |
| Alert and digest settings | Sending the alerts and emails you switch on | Consent |
| Usage and device data | Keeping the Service working, diagnosing faults, abuse prevention | Legitimate interests |
We do not ask for, and do not want, special-category data. We do not sell personal data, and we do not share it for anyone else's advertising.
3Cookies and local storage
We use a small number of strictly necessary cookies to keep you signed in and to remember your plan. These do not require consent.
Some preferences are kept in your browser's local storage rather than sent to us — your chosen theme, list or grid view, and the count of free analyses used this month. These never leave your device, and clearing your browser data clears them.
We run no analytics and set no non-essential cookies. If that ever changes, a consent banner will ask you before anything of the kind loads.
4Who processes data for us
We use the following sub-processors. Each is bound by contract to process data only on our instructions.
- Vercel — hosting and delivery
- Stripe — payments and subscription records. They receive your card details directly; we never see them.
- Resend — account emails, alerts and the weekly digest
Pricing data comes from third parties; none of them receive anything about you.
5Where your data goes
Our providers may process data outside the UK and EEA, including in the United States. Where they do, transfers rely on [adequacy decision / Standard Contractual Clauses / UK IDTA]. You can ask us for details of the safeguards in place.
6How long we keep it
Account and portfolio data is kept while your account is open, and deleted within 30 days of you closing it. Billing records are kept for 7 years, or whatever the applicable tax law requires. Server logs are kept for 90 days.
7Your rights
If you are in the UK or EEA you have the right to access your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable form. Where we rely on consent — alerts and the digest — you can withdraw it at any time, without affecting what we did before you did.
Write to seaking@slabindex.gg. We will respond within one month. If you are unhappy with our response you may complain to your supervisory authority; in the UK that is the Information Commissioner's Office.
Depending on where you live you may have comparable rights under other laws, including the California Consumer Privacy Act. We do not sell or share personal information as those terms are defined there.
8Marketing
We send the weekly digest and alerts only if you switch them on, and every one carries an unsubscribe link. Service messages — a receipt, a security notice, a change to these terms — are not marketing and are sent while your account is open.
9Children
The Service is not for under-18s and we do not knowingly collect their data. If you believe a child has given us data, write to seaking@slabindex.gg and we will delete it.
10Changes
We will post any change here and update the date at the top. Where a change materially affects you, we will tell you by email before it takes effect.