Privacy Policy

1. Who is responsible for your data

The controller of your personal data is SetupVerdict (setupverdict.com, setupverdict.com). For any privacy question or request, write to support@setupverdict.com.

2. Data we process

• Account data — first name, last name, email address and password. Your password is stored only in hashed form by our authentication provider; we cannot read it.
• Account status — a user ID, when the account was created, whether your email is confirmed, whether you have Pro, when Pro was activated, and the Stripe checkout reference that activated it.
• Payment data — handled by Stripe. Stripe collects your card and billing details; we only receive confirmation that a payment for your account succeeded, together with the email used at checkout and the checkout reference. We never receive or store your full card number.
• Technical data — when you visit the site or sign in, our hosting and authentication providers automatically record standard log data such as IP address, browser type, time of the request and sign-in events. This is used for security and to keep the service running.
• Support emails — if you write to us, the content of your message and your email address.

We do not collect your trading history, exchange balances, exchange API keys or wallet addresses, and the pairs you analyze are not stored on our servers.

3. Why we use it, and on what legal basis (GDPR)

• To create and run your account, sign you in, reset your password and provide Pro — necessary to perform our contract with you (Art. 6(1)(b) GDPR).
• To process and record your purchase — contract performance, and compliance with tax and accounting obligations (Art. 6(1)(b) and (c)).
• To send essential service emails (account confirmation, password reset, important notices about your access or about these documents) — contract performance and our legitimate interest in informing users (Art. 6(1)(b) and (f)). We do not send marketing emails without your separate consent.
• To keep the Platform secure, prevent abuse and fraud, and fix errors — our legitimate interest (Art. 6(1)(f)).
• To answer your messages — contract performance or our legitimate interest in providing support.

We do not use your data for advertising or profiling, and we do not make automated decisions that have legal or similarly significant effects on you. The trading verdicts are calculated from market data, not from personal data.

4. Service providers

We share data only with providers that help us run the Platform, and only as needed for their task:

• Supabase — authentication and database (account data, account status, sign-in logs). Privacy policy
• Stripe — payment processing. Stripe acts as an independent controller for the payment data it collects. Privacy policy
• Netlify — website hosting (server logs). Privacy policy
• Binance — public market data. Your browser requests prices directly from Binance's public API, so Binance receives your IP address and browser information as with any website request. No account data is sent. Binance's own privacy policy applies to those requests.
• Google Fonts and jsDelivr — deliver the fonts and the open-source libraries the pages use. They receive your IP address and browser information when the page loads.
• Email delivery — account and password emails are sent through our authentication provider or its email service.

We may also disclose data if required by law or by a valid request from a public authority, or to protect our rights in a legal dispute. We never sell or rent personal data.

5. International transfers

Some providers may process data outside the European Economic Area, for example in the United States. Where that happens, the transfer is protected by an adequacy decision (such as the EU–U.S. Data Privacy Framework, for certified providers) or by the European Commission's Standard Contractual Clauses, as offered by those providers.

6. How long we keep data

• Account data and Pro status — for as long as your account exists. When you ask us to delete your account, we delete it within 30 days.
• Purchase records — for as long as tax and accounting law requires us to keep them, even after account deletion.
• Technical logs — for the limited periods set by our hosting and authentication providers.
• Support emails — as long as needed to handle your request and any follow-up.

7. Browser storage & cookies

SetupVerdict uses no advertising cookies and no analytics or tracking tools. We store only what is strictly necessary in your browser's local storage:

• your sign-in session (set by Supabase), so you stay logged in;
• small preferences, such as which calculator tab you used last.

Because these are strictly necessary for the service you request, no consent banner is required. You can clear them at any time in your browser; you will then be signed out.

8. Security

All traffic is encrypted (HTTPS). Passwords are hashed. Database access rules ensure that each user can read only their own profile, and Pro status can be changed only by our payment system after Stripe confirms a payment. No system is perfectly secure; if a breach affecting your data occurs, we will inform you and the authorities as required by law.

9. Your rights

Under the GDPR (and similar laws) you have the right to:

• access the personal data we hold about you and get a copy;
• correct inaccurate data;
• delete your data ("right to be forgotten");
• restrict or object to processing based on our legitimate interests;
• data portability — receive your data in a common, machine-readable format;
• withdraw consent at any time, where processing is based on consent.

To use any of these rights, email support@setupverdict.com from the address linked to your account. We reply within one month. Deleting your account ends your Pro access permanently.

You also have the right to lodge a complaint with a data-protection authority — in Romania the National Supervisory Authority for Personal Data Processing (ANSPDCP), or the authority in the EU country where you live or work.

10. Children

SetupVerdict is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

11. Changes to this policy

We may update this policy when the service or the law changes. The date at the top shows the current version. We will announce material changes on the website or by email.

12. Contact

Privacy questions and requests:

support@setupverdict.com