Legal

Privacy Policy

Last updated: March 2025 · Version 1.0

The short version: we collect only what we need to run the product. We don't sell your data, we don't run ads, and we don't share your trading information with anyone. Your grades are yours.

1. Who we are

Acta Edge is a decision training tool for traders, operated by Acta Edge Ltd, a company registered in England and Wales.

Acta Edge Ltd
4 Hemlock Close, L12 0AX, Liverpool, England
Company number: 17122761
Email: legal@actaedge.io

For the purposes of UK GDPR and the Data Protection Act 2018, Acta Edge Ltd is the data controller.

2. What data we collect and why

We collect the minimum data required to operate the service. Here is exactly what we collect and the legal basis for each:

Account data
When you create an account we collect your email address. This is used solely to authenticate you and send transactional emails (password resets, account notices). Legal basis: performance of contract (Article 6(1)(b) UK GDPR).

Trade data
The trade variables, thesis, notes, grades, and outcomes you log in the app. This data is the core of the product — it is used to calculate your process scores and generate your insights. Legal basis: performance of contract.

Usage data
We track basic properties such as date of last login and number of trades logged. This is used to send relevant email sequences (for example, a nudge if you haven't logged in for 14 days). Legal basis: legitimate interests (improving product engagement).

Waitlist data
If you joined via the waitlist, we collected your email address and optional role. This is used to contact you about the product launch. Legal basis: consent.

3. What we do not collect

We do not collect financial account numbers, broker credentials, or any banking data.
We do not collect payment card data (handled entirely by Stripe if/when billing is introduced).
We do not run behavioural advertising or sell data to third parties.
We do not use your trade data to train AI models or share it with any third party for commercial purposes.
We do not collect IP addresses beyond what is logged automatically by our infrastructure provider.

4. Cookies and local storage

Authentication cookies — set by Supabase to keep you signed in. Strictly necessary.
Local storage — used to store draft trades and onboarding status locally on your device. No personal data is transmitted.
Cookie consent preference — stored in local storage to remember that you dismissed the cookie notice.

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.

5. Who we share data with

We use the following sub-processors, each bound by GDPR-compliant data processing agreements:

Supabase — database and authentication. SOC 2 Type II certified. Data stored in EU (Frankfurt region).
Resend — transactional email. Only your email address is shared.
Loops — marketing email sequences. Only your email address and usage properties (trades logged, last login) are shared.
Netlify — hosting and serverless functions. Access logs may contain standard HTTP metadata.

We do not share your data with any other parties. We will never sell your data.

6. International transfers

Our sub-processors may process data in the United States and other countries. Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place — typically Standard Contractual Clauses (SCCs) or an adequacy decision. Contact legal@actaedge.io for details.

7. How long we keep your data

Account and trade data — retained for as long as your account is active. Deleted within 30 days of account deletion.
Email marketing — retained until you unsubscribe.
Waitlist data — retained until you create an account or ask to be removed.

8. Your rights under UK GDPR

To exercise any of the following rights, email legal@actaedge.io:

Right of access — request a copy of all personal data we hold about you.
Right to rectification — ask us to correct inaccurate data.
Right to erasure — ask us to delete your account and all associated data.
Right to restriction — ask us to pause processing in certain circumstances.
Right to data portability — request your trade data in JSON or CSV format.
Right to object — object to processing based on legitimate interests, including marketing.
Right to withdraw consent — withdraw consent at any time where processing is consent-based.

We will respond within 30 days. If unsatisfied, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Self-reported data

Until broker integrations are available, all trade variables are self-reported. We cannot verify the accuracy of inputs. The insights generated are only as reliable as the data you enter.

10. Children

Acta Edge is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. Contact legal@actaedge.io if you believe a child has provided us with data.

11. Security

We use encrypted connections (HTTPS), row-level security in our database, and access controls on our infrastructure. If you become aware of a security issue, contact legal@actaedge.io immediately.

12. Changes to this policy

Material changes will be communicated by email or in-app notice. The "last updated" date at the top will always reflect the most recent version.

Questions about this policy?

Email legal@actaedge.io — we aim to respond within 5 business days.

Acta Edge Ltd · 4 Hemlock Close, L12 0AX, Liverpool · Company no. 17122761