Privacy policy

[company name], [street and number], [postcode and city], the Netherlands, KvK [KvK number], is responsible for your personal data at MacroSetup. For anything about privacy, write to [privacy email].

• Your accountEmail address, and the name and profile picture from your Google account when you sign in with Google. When you signed up, and when you were last active. Why: To give you the service you signed up for (contract).
• Your trial and subscriptionTrial dates, your plan, its status, and a discount code you claimed. Payment details stay with Stripe; we see the status of a payment, never your full card details. Why: To give you the service and to bill it (contract), and to keep records as Dutch tax law requires (legal obligation).
• Sign-ins and devicesThe devices your account is used on (a name such as the browser and system, and when it was first and last seen), and each sign-in with its time, a one-way hash of your IP address and the country it points to. We do not store the IP address itself. Why: To keep your account safe and to enforce the personal license (legitimate interest).
• What you put in the appYour trading accounts, trades, notes and screenshots in the account tracker, your time zone and your support messages. The risk calculator keeps its numbers in your own browser only. Why: To give you those tools and to answer you (contract).
• Partner linksWhen you arrive through a partner's link, which partner it was, and for counting visits a one-way hash of your IP address and your country. If you sign up and later pay, the partner or member who invited you earns a reward. They only see counts (visits, sign-ups, paying customers), never who you are. Why: To pay partners correctly (legitimate interest).

When we rely on legitimate interest, you may object; tell us and we will weigh it again. We do not use your data to make automated decisions about you: signs of a shared account are looked at by a person before anything happens to your account.

• Your account and what you put in the app: as long as you have an account, and [period] after you close it.
• Invoices and payment records: seven years, as Dutch tax law requires.
• Sign-ins, devices and partner visits: [period].
• Support conversations: [period] after the last message.

These companies process data only on our instructions and under a processing agreement:

• Vercel: hosting of the website and the app
• Supabase: the database, sign-in and screenshot storage, in [region]
• Stripe: payments and invoices
• [email provider]: sending email, such as answers to support messages

When you sign in with Google, Google handles that sign-in under its own privacy policy. Some of these companies are based in the United States. Transfers outside the EU are covered by [the EU-US Data Privacy Framework or standard contractual clauses].

We use cookies and browser storage that the site needs to work, such as the one that keeps you signed in, and one that remembers which partner link you came through. No tracking and no advertising cookies. The cookie policy lists every one of them.

You can ask to see, correct, export or delete your data, to limit how we use it, or object to it, by writing to [privacy email]. We answer within a month. Most of your own data in the app you can also change or delete yourself.

If you think we handle your data wrongly, please tell us first. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

MacroSetup is for adults. Do not make an account if you are under 18.

If we change this policy in a way that matters, we tell you by email before it applies.