Privacy policy

MacroSetup, KvK 96961023 (address on the company details page), is responsible for your personal data at MacroSetup. For anything about privacy, write to privacy@macrosetup.com.

• Your accountEmail address, and the name and profile picture from your Google account when you sign in with Google. When you signed up, and when you were last active. Why: To give you the service you signed up for (contract).
• Your trial and subscriptionTrial dates, your plan, its status, and any discount code you claimed. Payment details stay with Stripe; we see the status of a payment, never your full card details. Why: To give you the service and to bill it (contract), and to keep records as Dutch tax law requires (legal obligation).
• One free trial per personA one-way code made from your email address, with dots and anything after a plus sign left out for addresses where those make no difference. It does not hold the address itself, and it stays after you close your account, so the free trial is once per person. Why: To keep the free trial for new people (legitimate interest).
• Sign-ins and devicesThe devices your account is used on (a name such as the browser and system, and when it was first and last seen), and each sign-in with its time, a one-way hash of your IP address and the country it points to. We do not store the IP address itself. Why: To keep your account safe and to enforce the personal licence (legitimate interest).
• When you use itPer day, the first and the last moment you were in the app and how often you came back after being away. A count, not a trail: we do not keep which pages you opened or in what order. Why: To see whether the research is worth opening daily, and to keep the service working for the people who use it (legitimate interest).
• What you put in the appYour trading accounts, trades, notes and screenshots in the account tracker, your time zone, your support messages (also a question you email to info@, with your address and name) and the feedback you give us. The risk calculator keeps its numbers in your own browser only. Why: To give you those tools and to answer you (contract).
• The weekly emailWhen you sign up for the weekly, on the site or with the switch in your account: your email address, where you signed up, when you signed up and confirmed, and which weekly emails went to it. We keep only a one-way code of the confirmation link. With the switch in your account there is no confirmation link, since signing in has confirmed your address already, and closing the account takes the address off the list. It is not linked to an account otherwise. Why: To send you the email you asked for (consent). Every email has a link to stop it; your address is then removed from the list at once.
• Partner linksWhen you arrive through a partner's link, which partner it was, and for counting visits a one-way hash of your IP address and your country. If you sign up and later pay, the partner or member who invited you earns a reward. They only see counts (visits, sign-ups, paying customers), never who you are. Why: To pay partners correctly (legitimate interest).
• When you mention us on XIf you mention @macrosetup on X or reply to one of our posts, we keep that post (your handle, your display name, the text and when you posted it) so we can answer it. We delete it 90 days after it came in. Why: To answer you (legitimate interest).
• How you found usOn your first visit the site remembers, in a cookie, which site sent you (only its name, such as google.com, never the page you came from or what you searched for), the campaign tags in the link if it had them, the first page you opened and the date. If you make an account within 90 days, that is stored with your account. Why: To see which channels bring members (legitimate interest).

When we rely on legitimate interest, you may object; tell us and we will weigh it again. We make one automated decision: a new account whose email address already had a free trial starts without one; if you think that is wrong, write to us and a person looks at it. Everything else is looked at by a person first: signs of a shared account or of a second trial change nothing about your account by themselves.

• Your account and what you put in the app: as long as you have an account. Closing it deletes it straight away, and copies in our backups are gone within 90 days.
• Invoices and payment records: seven years, as Dutch tax law requires.
• Sign-ins, devices and partner visits: 12 months.
• The one-way code of your email address for the free trial: 2 years after the trial started.
• Support conversations: 2 years after the last message.
• Error reports from the app: 90 days.
• Posts on X that mention us: 90 days after they came in.
• The weekly email: until you stop it. An address that is never confirmed is removed after 30 days.

These companies process data only on our instructions and under a processing agreement:

• Vercel: hosting of the website and the app, and the cookieless count of page views
• Supabase: the database, sign-in and screenshot storage, in London (United Kingdom)
• Stripe: payments and invoices
• Resend: sending our email (sign-in codes, emails about your account and payments, answers to support, and the weekly), and receiving the email you send to info@, which it passes on to us
• TransIP: our mailboxes, for the email you send us
• Cloudflare: Turnstile, the check that a person and not a script fills in the sign-in and weekly forms

When you sign in with Google, Google handles that sign-in under its own privacy policy. Email you send us is forwarded to a Gmail mailbox of ours, where we read and answer it, so Google holds a copy of it under its own terms.

Support questions, in the app or by email, are first read by our AI assistant, which runs on Claude by Anthropic. It answers questions about how MacroSetup works and says in every answer that it is an AI. Anything about payments, your plan, refunds, cancelling, complaints, privacy or the security of your account goes to a person. The assistant sees the conversation and your first name, never your email address or payment details, and we have switched off the setting that lets Anthropic use these conversations to train its models.

The database is in the United Kingdom, which the European Commission recognises as protecting personal data adequately. Some of these companies are based in the United States: a transfer there is covered by the EU-US Data Privacy Framework where the company is certified under it, and otherwise by the standard contractual clauses of the European Commission.

We use cookies and browser storage that the site needs to work, such as the one that keeps you signed in, one that remembers which partner link you came through, and one that remembers which site first sent you. No cross-site tracking and no advertising cookies. We do count how often a page is opened, and a few steps on the way to a plan, such as a click on an upgrade button or a new account, through Vercel Web Analytics, which uses no cookies and keeps nothing that can identify you: the page, the step, the referrer, the country and the device type, with a daily hash that is discarded after 24 hours. The address is stripped of anything after the question mark before it is counted, and the sign-in pages are left out entirely: a new account is counted on the first page of the app. The cookie policy lists every one of them.

How links to prop firms work, and what we count when you click one, is on the affiliate disclosure page.

You can ask to see, correct, export or delete your data, to limit how we use it, or to object to it, by writing to privacy@macrosetup.com. We answer within a month. Most of your own data in the app you can also change or delete yourself.

If you think we handle your data wrongly, please tell us first. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

MacroSetup is for adults. Do not make an account if you are under 18.

If we change this policy in a way that matters, we tell you by email before it applies.