Privacy Policy
Last updated: 23 July 2026
Draft for review. This template reflects UK GDPR and Data Protection Act 2018 standard practice. Confirm your actual data flows (payment processor, email tool, AI provider, analytics) and have it reviewed before publishing.
1. Who we are
[Company Legal Name] ("we", "us") is the data controller for personal data collected through AI Indicator Lab (the "Service"). This policy explains what data we collect, why, and your rights under UK data protection law, including the UK GDPR and the Data Protection Act 2018.
2. What we collect
- Account data: name, email address, password (hashed), and billing details (processed by our payment provider, we do not store full card numbers).
- Waitlist data: email address submitted through our early access form.
- Trading strategy inputs: information you choose to share in chat about your trading approach, instruments, and trade journal entries, used to generate and refine your indicator.
- Usage data: how you interact with the Service, for product improvement and fraud prevention.
- Technical data: IP address, browser type, device information, collected automatically via cookies or similar technologies.
3. How we use your data
- To provide and personalise the Service, including generating your indicator and AI chat responses (legal basis: performance of a contract).
- To process payments and manage your subscription (performance of a contract; legal obligation for tax/accounting records).
- To send service updates, security notices, and, where you've opted in, product and marketing communications (legitimate interests / consent).
- To maintain the security and integrity of the Service, including preventing misuse of the AI assistant (legitimate interests).
4. AI processing of your inputs
Messages you send to the AI assistant, including details about your trading strategy, may be processed by a third party AI model provider acting as our data processor, under a data processing agreement, to generate responses and your indicator. We do not knowingly use your chat content to train third party foundation models beyond what is necessary to deliver the Service, and we do not sell your data.
5. Who we share data with
- Payment processors, to handle subscription billing.
- Cloud hosting and AI model providers, to run and deliver the Service.
- Email/communication tools, to send transactional and (where consented) marketing emails.
- Regulators or law enforcement, where required by law.
We do not sell your personal data to third parties.
6. International transfers
Some of our service providers may process data outside the UK. Where this happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses with a UK addendum.
7. How long we keep your data
We retain account and subscription data for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, or tax obligations. Waitlist emails are kept until launch or until you unsubscribe, whichever is sooner.
8. Your rights
Under UK GDPR, you have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent for marketing at any time. To exercise these rights, contact us at [privacy contact email]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Cookies
We use essential cookies to run the Service and, where you consent, analytics cookies to understand usage. You can control cookies through your browser settings and any cookie banner presented on the site.
10. Changes to this policy
We may update this policy from time to time. Material changes will be notified to active subscribers by email or in app notice.
11. Contact
For any privacy questions or requests, contact [privacy contact email].
Placeholders in square brackets must be completed with your real business and contact details. Confirm the actual third party processors you use (AI provider, payment processor, email tool, analytics) before publishing, and have this reviewed by a UK solicitor or data protection professional.