Sector Rotation Monitor

The data controller for Sector Rotation Monitor is Neremar Advisory Ltd (company number 08828600, registered in England and Wales). For data-related enquiries, contact support@sectorrotationmonitor.com.

1. Data We Collect

Account data: email address (required for authentication)
Login metadata: timestamps, IP addresses, browser/device info
Usage data: pages visited, features used, session duration
Payment data: processed exclusively by Stripe — we store only your Stripe Customer ID, subscription ID, and payment status

2. How We Use Your Data

Authentication: to verify your identity and manage your session
Security: to detect and prevent unauthorised access, abuse, and fraud
Service improvement: to understand usage patterns and improve features
Communication: to send account-related emails (e.g., subscription status, security alerts)

3. Data Storage

Your data is stored on Google Cloud Platform (Firestore) in the europe-west1 region. Firebase Authentication manages login credentials. All data is encrypted at rest and in transit.

4. Data Retention

Account data: retained while your account is active, plus 30 days after deletion
Login logs: retained for 12 months
Aggregate analytics: retained indefinitely (non-personal)

5. Third-Party Services

We use the following third-party services that may process your data:

Firebase Authentication — login and session management
Google Cloud Run — application hosting
Google Firestore — data storage
Stripe — payment processing (PCI DSS Level 1 compliant)
Third-party market data providers — market data sources (no personal data shared)

6. Payment Data

All card data is processed exclusively by Stripe, which is PCI DSS Level 1 compliant. We never see, store, or process your card number, CVV, or expiration date. We store only your Stripe Customer ID, Subscription ID, and payment status.

7. Your Rights (GDPR)

If you are in the UK or EU, you have the right to:

Access: request a copy of your personal data
Rectification: correct inaccurate personal data
Erasure: request deletion of your personal data
Portability: receive your data in a machine-readable format
Object: object to processing of your personal data

To exercise any of these rights, contact us at support@sectorrotationmonitor.com.

8. Cookies

We use only essential cookies for authentication session management. We do not use advertising cookies, third-party tracking cookies, or analytics cookies that require consent.

9. Age Restriction

Sector Rotation Monitor is not intended for users under the age of 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email. Continued use of the Service after changes constitutes acceptance.