Privacy Policy
Effective Date: July 1, 2024
Last Updated: July 1, 2024
1. Introduction
VectaBass ("us", "we", or "our") provides portfolio analysis and financial education services through our website and associated applications (collectively, the "Service"). This Privacy Policy explains how we collect, use, protect, and share your information when you use our Service.
​
​2. Key Terms
Personal Data: Information that can identify you directly or indirectly
Service Data: Information created or provided during the use of our services
Usage Data: Automatically collected data about how you use our Service
Platform: The VectaBass website, applications, and associated services
3. Information We Collect
3.1 Account Information
-
Email address
-
Name
-
Password (encrypted)
-
Account preferences
-
Subscription status
3.2 Service Data
-
Portfolio information
-
Stock selections and watchlists
-
Chat histories with our AI assistant
-
Analysis requests and preferences
-
Files uploaded to our platform
3.3 Payment Information
-
Transaction history
-
Subscription details
-
Payment timestamps
-
Billing address
Note: Credit card information is processed directly by Stripe and is not stored on our servers.
3.4 Automatically Collected Information
-
IP address
-
Browser type and version
-
Device information
-
Operating system
-
Access timestamps
-
Usage patterns
-
Performance data
-
Cookie data
4. How We Use Your Information
4.1 Essential Services
-
Account creation and management
-
Authentication and security
-
Processing payments and subscriptions
-
Providing portfolio analysis
-
Generating financial insights
-
Responding to your requests
-
Customer support
4.2 Service Improvement
-
Analyzing usage patterns
-
Improving user experience
-
Debugging and optimization
-
Product development
-
Research and development
-
Training our AI systems
4.3 Communication
-
Service updates and notifications
-
Technical announcements
-
Subscription-related messages
-
Customer support responses
-
Marketing communications (with consent)
5. Data Processing and Storage
5.1 Data Security
-
Industry-standard encryption in transit and at rest
-
AWS security infrastructure
-
Regular security audits
-
Access controls and monitoring
-
Secure backup systems
-
Incident response procedures
5.2 Third-Party Processors
We use the following key service providers:
-
AWS (hosting and storage)
-
Stripe (payment processing)
-
OpenAI (AI services)
-
Google Analytics (usage analytics)
Each provider processes only the minimum necessary data and is bound by strict data protection agreements.
5.3 Data Retention
Active accounts: Data retained while account is active
Deleted accounts: Basic information retained for 30 days
Payment records: Retained as required by law (typically 7 years)
Chat histories: Retained for service improvement and training
Usage logs: Retained for 90 days
6. Your Rights and Choices
6.1 Access Rights You can:
-
Access your personal data
-
Export your service data
-
Review your chat history
-
View your transaction history
6.2 Control Rights You can:
-
Update your account information
-
Modify your portfolios
-
Change your preferences
-
Manage your subscription
-
Delete your account
6.3 Marketing Choices You can:
-
Opt-out of marketing emails
-
Adjust notification preferences
-
Control cookie settings
7. Data Sharing and Disclosure
7.1 Required Sharing We may share information:
-
To comply with legal obligations
-
To protect rights and safety
-
To prevent fraud or abuse
-
To enforce our terms of service
7.2 Business Operations
We may share anonymized or aggregated data:
-
For service improvement
-
For research purposes
-
For market analysis
-
With business partners
8. International Data Transfers
We may transfer your data internationally using appropriate safeguards:
-
Standard contractual clauses
-
Adequacy decisions
-
Privacy Shield certification
-
Other legal mechanisms
9. Children's Privacy
-
We do not knowingly collect data from children under 13
-
Parents can request deletion of children's data
-
We will promptly remove any inadvertently collected children's data
10. Changes to This Policy
-
We will notify you of material changes
-
Updates will be posted on our website
-
Changes effective 30 days after posting
-
Continued use indicates acceptance
11. Specific Privacy Rights
11.1 California Residents (CCPA)
You have the right to:
-
Know what personal information is collected
-
Know if personal information is sold or disclosed
-
Decline the sale of personal information
-
Access your personal information
-
Request deletion of personal information
11.2 European Residents (GDPR)
You have the right to:
-
Access your data
-
Rectify your data
-
Erase your data
-
Restrict processing
-
Data portability
-
Object to processing
12. Contact Information
For privacy-related matters:
Email: vectabass@gmail.com
Address: 50 Jenner Boulevard, Emersons Green, Bristol, United Kingdom, BS16 7JS
Privacy Officer: Oliver Wiggins-Hay - oliver.wigginshay@vectabass.com
13. Financial Services Disclaimer
VectaBass provides financial education and analysis tools for informational purposes only:
-
Not financial advice
-
No investment recommendations
-
Users responsible for investment decisions
-
Past performance not indicative of future results
14. Data Usage Rights
We retain the right to use collected data, in anonymized or aggregated form, for:
-
Service improvement
-
AI training and optimization
-
Research and development
-
Product enhancement
-
Market analysis
This usage will never include personally identifiable information unless explicitly authorized.
15. Security Measures
We implement and maintain:
-
Encryption at rest and in transit
-
Access controls
-
Security monitoring
-
Vulnerability testing
-
Incident response plans
-
Employee training
-
Regular security audits
16. Acknowledgment
By using our Service, you acknowledge this Privacy Policy and consent to the practices described herein. If you do not agree with this Policy, please do not use our Service. This Privacy Policy was last updated on July 1, 2024. If you have any questions about this Privacy Policy, please contact us at vectabass@gmail.com.
​