Last updated: July 2026
This Privacy Policy explains how EasyStox, collects, uses, and shares personal information. We act as the data controller for the personal data described below.
1. Information We Collect
Account data: name, email address, password hash, display name.
Profile and preferences: watchlists, saved screens, notification preferences.
Usage data: pages viewed, features used, alerts triggered, device and browser type, IP address, approximate location.
Support data: messages, attachments, and metadata you send when contacting support.
Payment data: processed directly by Paddle; we receive a subscription status, plan, and a customer reference — we do not store card numbers.
2. How We Use Information
To create and operate your account (contract performance);
To provide and improve the Service, including personalization and analytics (legitimate interests);
To send transactional emails such as alerts, receipts, and support responses (contract performance);
To send optional marketing emails where you have opted in (consent);
To detect, prevent, and address fraud, abuse, and security incidents (legitimate interests / legal obligation);
To comply with legal obligations (legal obligation).
3. Legal Bases (GDPR / UK GDPR)
Where applicable, we rely on the following legal bases: performance of a contract, our legitimate interests in operating and improving the Service, your consent (for marketing and non-essential cookies), and compliance with legal obligations.
4. Sharing of Information
We share personal information with:
Paddle.com — our Merchant of Record and payment processor. Paddle handles checkout, billing, tax, subscription management, invoicing, and refunds. See Paddle's Privacy Policy.
Infrastructure providers — hosting, database, email delivery, and analytics vendors acting as processors on our behalf.
Market data providers — anonymous requests to fetch prices, fundamentals, and news.
Professional advisers — legal, accounting, and compliance advisers where necessary.
Authorities — where required by law or to protect our rights.
We do not sell personal information.
5. International Transfers
Personal data may be processed in countries outside your own. Where required, we rely on Standard Contractual Clauses or adequacy decisions to safeguard such transfers.
6. Data Retention
We retain personal data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements. Support data is retained for up to 24 months. Aggregate, anonymised data may be kept indefinitely.
7. Your Rights
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, to object to processing, and to withdraw consent. To exercise these rights, contact us via our contact form. You may also lodge a complaint with your local data protection authority.
8. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, encrypted storage, access controls, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security.
9. Cookies
We use essential cookies to keep you signed in and secure the Service, and optional analytics cookies to understand how the Service is used. You can manage cookie preferences in your browser and via our Cookie Notice.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from them.
11. Changes
We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email.
12. Contact
For privacy questions, contact us via our contact form.