Privacy policy

Last updated 25 August 2026

A plain-language description of what the system actually stores. Have it reviewed against your GDPR obligations before scaling.

What we store

• Account — username, email address, a hashed password, and your plan tier.
• Your configuration — signal setups, watchlists, scan definitions and saved workspaces.
• Activity — signal events fired for you, scan history, and a record of each AI call (feature, model, token counts and cost) so usage can be billed and shown back to you.
• Notification settings — email address, browser push subscription, and — only if you connect them — a Telegram chat id or a webhook URL and its signing secret.
• Payment — handled by Stripe. We store a customer and subscription id; we never see or store card details.

What we do not do

We do not sell personal data, we do not run third-party advertising or analytics trackers, and we do not build profiles for anyone other than you. Market data we ingest is public exchange data and is not personal to you.

AI processing

AI features send market context and your signal configuration to Anthropic for processing. Your password, email address and payment details are never included in a prompt.

Retention

Market history is retained on a rolling window (raw ticks 90 days, order-book snapshots 14 days). Your account data is retained while your account exists. Delete your account and we remove your personal data and configuration; billing records are kept where tax law requires.

Your rights

You can request access to, correction of, export of, or deletion of your data by emailing privacy@orderflow-beast.com.

Cookies

We set a session cookie to keep you signed in. That is the only cookie the product requires, and there are no advertising or tracking cookies.