Privacy Policy

EdgeForm is a financial research and portfolio management platform operated by Benjamin Szymanek, a sole trader trading as EdgeForm and based in the United Kingdom. Benjamin Szymanek is the data controller responsible for your personal data.

For any privacy-related enquiry, contact us at contact@edgeformhq.com.

We collect and store the following categories of data:

• Account information: email address, subscription tier, account creation date.
• Trading data: positions, trades, portfolio transactions, and watchlist entries, entered manually by you. No broker connection is used, and we never access your brokerage account.
• Platform preferences: theme preference, screener column settings, trading parameters.
• Security events: login and logout timestamps, failed login attempts, password changes, and data export or deletion requests, logged to our audit trail.
• Consent records: your cookie and communication choices, kept as a record of the preferences you set.
• Payment data: billing and payment card data is managed entirely by Stripe. EdgeForm never stores, processes, or has access to your payment card numbers.
• Usage data: AI credit usage and feature interactions for platform improvement.

Your data is used solely to operate and improve the platform:

• To authenticate your account and maintain your session.
• To calculate portfolio metrics, research tools, and analytics shown to you.
• To manage your subscription via Stripe.
• To maintain platform security through audit logging.
• To send transactional emails (account verification, password reset). Marketing emails are sent only if you opted in at registration and can be unsubscribed at any time.

We rely on the following lawful bases under UK GDPR: performance of our contract with you (to operate your account and subscription), our legitimate interests (to keep the platform secure and to improve it), your consent (for marketing emails and non-essential cookies), and compliance with our legal obligations.

We do not sell your data to any third party. We do not use your data for advertising.

• Active accounts: data is retained for the lifetime of your account.
• Deleted accounts: data is retained for 30 days following a deletion request, then permanently anonymised. During this period you may contact us to cancel the deletion.
• Audit logs: retained for 12 months for security and compliance purposes.
• Consent records: retained while your account is active and for a reasonable period afterwards to evidence the choices you made.

As a user based in the United Kingdom or European Economic Area, you have the following rights:

• Right of access: request a copy of all data we hold about you.
• Right to erasure: request deletion of your account and all associated data.
• Right to correction: request correction of inaccurate data.
• Right to portability: download all your data as a JSON file via Settings > Account > Export My Data.
• Right to object: object to processing that we carry out on the basis of our legitimate interests.
• Right to restriction: ask us to limit how we process your data in certain circumstances.
• Right to withdraw consent: where we rely on your consent, withdraw it at any time, for example by changing your cookie preferences or unsubscribing from marketing emails.

To exercise any of these rights, contact contact@edgeformhq.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.

In the event of a data breach affecting your personal data, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with UK GDPR requirements.

EdgeForm uses the following third-party services, which may process your data on our behalf:

• Supabase: Database hosting and user authentication. Privacy policy
• Stripe: Payment processing and subscription billing. Privacy policy
• Vercel: Platform hosting, deployment, and content delivery. Privacy policy
• Anthropic: AI analysis features (stock assessment, thematic chains). Privacy policy
• Resend: Transactional email delivery (verification, password reset). Privacy policy
• Kit (ConvertKit): Marketing email delivery to users who opted in. Privacy policy
• Sentry: Error and reliability monitoring. Configured to send no personally identifiable information and no IP addresses. Privacy policy
• Upstash: Rate limiting to protect the platform from abuse. Processes IP addresses transiently. Privacy policy

Your core account, trading, preference, security and consent data is hosted within the European Economic Area (in Ireland) by the following provider:

• Supabase: Database hosting and user authentication.

Some of our other processors are located outside the UK and EEA, primarily in the United States. Where your data is transferred internationally, it is protected by appropriate safeguards, such as Standard Contractual Clauses with the UK Addendum, or the UK Extension to the EU-US Data Privacy Framework where applicable, under each provider's data processing agreement. These processors are:

• Stripe (US): Payment processing and subscription billing.
• Vercel (US): Platform hosting, deployment, and content delivery.
• Anthropic (US): AI analysis features (stock assessment, thematic chains).
• Resend (US): Transactional email delivery (verification, password reset).
• Kit (ConvertKit) (US): Marketing email delivery to users who opted in.
• Sentry (US): Error and reliability monitoring. Configured to send no personally identifiable information and no IP addresses.
• Upstash (Global): Rate limiting to protect the platform from abuse. Processes IP addresses transiently.

We use a small number of cookies. We do not use advertising or tracking cookies. We group cookies into four categories: strictly necessary, functional, analytics, and marketing. We currently use only strictly necessary and functional cookies. No analytics or marketing cookies are active.

• Strictly necessary: keep you signed in, keep your session secure, and protect the platform. These include an authentication cookie managed by Supabase and a cookie that records your cookie choices (edgeform_consent). These are always on.
• Functional: remember your preferences, such as your theme (theme, preferred-theme) and language (edgeform_lang).
• Analytics: would help us understand how the platform is used. None are currently active.
• Marketing: would measure whether our advertising reaches the right people. None are currently active.

You can review or change your cookie choices at any time: Cookie preferences.

For all privacy-related questions, requests, or complaints, contact us at contact@edgeformhq.com.