Privacy notice
1. Data controller
The data controller is Fabulous Instruments S.r.l., with registered office at Via Mannino Cefaly 8, 95126 Catania (CT), Italy, VAT no. IT05179660872, who can be contacted at [email protected].
2. What data we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email, password (stored only as a hash), first and last name | Creating and managing the account, access to the Service, service communications (email confirmation, password recovery, subscription notices) | Performance of a contract (Art. 6.1.b) | Duration of the account; upon deletion the data is removed and an anonymous record remains |
| Billing data: company name, VAT number or tax code, address | Issuing receipts and invoices | Performance of a contract; legal obligations (Art. 6.1.c) | 10 years (tax records) |
| Payment data (card) | Collection of the subscription fee. It is collected and stored exclusively by Stripe, which acts as data processor and as an independent controller for its own anti-fraud obligations; we neither receive nor store the card number. | Performance of a contract; legal obligations (Art. 6.1.c) | According to Stripe's privacy notice |
| Consent log (date, time, IP address, version of the texts accepted) | Demonstrating acceptance of the Terms and of the Privacy Notice (Art. 7 GDPR) | Legal obligation / legitimate interest | Duration of the account and 5 years after closure |
| Settings and strategies saved in the application | Operation of the Service | Performance of a contract | Duration of the account |
| Technical data: IP address, browser type, access times, error logs | Security, abuse prevention, operation | Legitimate interest (Art. 6.1.f) | Maximum 90 days |
| Email, for promotional communications about the service | Sending you news about the service (at most one email per month) | Consent (Art. 6.1.a), optional and revocable at any time from the Account page | Until withdrawal |
We do not process data about your accounts with brokers, your actual trades or your assets: the Service does not require them and cannot access them. We do not engage in profiling for advertising purposes and we do not sell data to third parties.
3. Cookies and similar tools
The site and the application use only technical cookies and local storage, necessary for authentication (session cookie), for protecting forms and for remembering your preferences (for example the selected index). Consent is not required for these cookies (Art. 122 of the Italian Privacy Code, Guidelines of the Italian Data Protection Authority (Garante) of 10 June 2021). We do not use profiling cookies or advertising tracking tools. Details in the Cookie notice.
4. Recipients and data processors
The data is processed by providers acting on our behalf or as independent controllers, limited to what is necessary:
- Hosting: Hetzner Online GmbH, Germany — servers in the European Union.
- Payments: Stripe Payments Europe Ltd., Ireland — collects payments, stores card data and issues receipts and invoices on our behalf (Stripe privacy notice).
- Transactional email: Zoho Mail (Zoho Corporation, EU data center) — for sending confirmations and service communications.
- On-site assistant: the questions you type in the "Assistant" window are sent, together with the previous messages of the same conversation, to Anthropic PBC (United States) to generate the reply using the Claude model; we do not store them and the conversation stays in your browser until the tab is closed. Do not enter personal data in the assistant. The transfer takes place on the basis of standard contractual clauses.
Some providers may process data outside the European Union; in that case the transfer takes place on the basis of adequacy decisions or of the standard contractual clauses approved by the European Commission.
5. Your rights
You may at any time request access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest; you may withdraw consent where it is the basis for processing. From the Account page of the application you can do this yourself: download a complete copy of your data, correct your profile, withdraw consent to communications and delete the account. For any other request write to [email protected]: we reply within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (garanteprivacy.it).
6. Security
Connections are encrypted (HTTPS), passwords are stored only as hashes using the scrypt algorithm, login attempts are rate-limited, and access to the systems is protected by keys and logged. However, no system is immune from risk: in the event of a breach that entails a risk to your rights we will inform you without undue delay, as required by law.
7. Minors
The Service is intended for adults. We do not knowingly collect data from persons under 18 years of age.
8. Changes
This notice may be updated. Material changes will be communicated by email to registered users; the version in force is the one published at this address.