Privacy Policy
This policy explains what data InsidersAlpha collects, how it is used, and your rights under GDPR and applicable data protection laws.
Data controller
InsidersAlpha is operated as an independent platform. For data protection inquiries, contact: privacy@insidersalpha.com
What data we collect
| Data | Source | Purpose |
|---|---|---|
| Email address | Account registration | Authentication, account management |
| Password (hashed) | Account registration | Authentication — never stored in plain text |
| Subscription status | Stripe payment processor | Access control for Pro/Elite features |
| Stripe customer ID | Stripe | Subscription management and billing |
| Page views & events | Google Analytics 4 | Understanding platform usage (anonymised) |
| Watchlist stocks | User input | Personalising watchlist feature |
We do not collect: real name, phone number, address, date of birth, or financial information beyond what is handled directly by Stripe.
Third-party services
| Service | Purpose | Privacy policy |
|---|---|---|
| Supabase | Database & authentication | supabase.com/privacy |
| Stripe | Payment processing | stripe.com/privacy |
| Vercel | Hosting & deployment | vercel.com/legal/privacy-policy |
| Google Analytics 4 | Usage analytics | policies.google.com/privacy |
We do not sell your data to any third party. We do not share personal data with third parties other than those listed above and only to the extent necessary to provide the service.
Legal basis for processing (GDPR)
- Contract performance — processing your email and subscription data to provide the service you signed up for
- Legitimate interest — usage analytics to improve the platform
- Legal obligation — retaining transaction records as required by applicable law
Cookies
InsidersAlpha uses the following cookies:
- Authentication session (Supabase) — stores your login session. Essential for the service to function. Expires when you sign out or after 7 days of inactivity.
- Analytics (Google Analytics 4) — anonymous usage tracking. You can opt out via your browser settings or a GA opt-out extension.
We do not use advertising cookies, tracking pixels, or third-party retargeting cookies.
Your rights under GDPR
If you are located in the European Economic Area, you have the following rights:
- Right of access — request a copy of your personal data
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your account and associated data
- Right to data portability — receive your data in a portable format
- Right to object — object to processing based on legitimate interest
- Right to restrict processing — request restriction while a dispute is resolved
To exercise any of these rights, email privacy@insidersalpha.com. We will respond within 30 days.
Data retention
Account data is retained for as long as your account is active. On account deletion, personal data (email, subscription info) is deleted within 30 days. Anonymised analytics data may be retained indefinitely.
Changes to this policy
We may update this privacy policy from time to time. Material changes will be communicated via the platform or by email. Continued use of the platform after changes constitutes acceptance of the revised policy.
Last updated: May 2026