Privacy Policy

MktInvest ("MktInvest", "we", "us") is the data controller for the personal data processed through mktinvest.com. You can reach us at any time via the contact page or by email at paolo@mktinvest.com.

• Account data. When you sign in with Google we receive your name, email address and profile picture from your Google account. We store these to identify your account.
• Billing data. Payments are processed entirely by Stripe. We never see or store your card number; we only store your Stripe customer id, your subscription status and its renewal date.
• Preferences. If you are a Pro subscriber, we store the email-alert preferences you choose (which commodities you want alerts for).
• Contact requests. If you write to us through the contact or corporate forms, we store your name, email address and message so we can reply.
• Usage data. We use Vercel Analytics, which collects aggregated, privacy-friendly usage metrics without tracking cookies and without identifying individual visitors.
• Technical logs. Like any web service, our hosting infrastructure processes IP addresses and request metadata in short-lived server logs for security and debugging.

• To provide the service (performance of a contract): creating your account, serving the content your plan entitles you to, processing your subscription and sending you the alerts you enabled.
• Legitimate interest: securing the service (rate limiting, abuse prevention), measuring aggregated usage to improve the product, and replying to your requests.
• Legal obligations: invoicing, tax and accounting records related to payments.

We do not sell your data, we do not profile you for advertising, and we do not send marketing emails without your consent.

• Google — sign-in (OAuth) provider.
• Stripe — payment processing and billing (PCI-DSS certified; card data never touches our servers).
• Vercel — hosting and content delivery.
• Brevo — transactional email (welcome, subscription confirmation, alerts), based in the EU.
• Our database hosting provider — the EU virtual private server where the application database lives.

Some of these providers are established outside the EU (in particular in the United States). Where that is the case, transfers are covered by the provider's data-processing terms and the appropriate safeguards under Chapter V of the GDPR (e.g. Standard Contractual Clauses or an adequacy decision such as the EU–US Data Privacy Framework).

Account and subscription data is kept for as long as your account exists. Contact-form messages are kept for up to 24 months. Billing records are kept for the period required by tax law (typically 10 years). You can ask for your account and its associated data to be deleted at any time (see below).

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise any of these rights, write to us at paolo@mktinvest.com — we answer within 30 days. You also have the right to lodge a complaint with your local data-protection authority (in Italy: the Garante per la protezione dei dati personali).

We only use strictly necessary cookies (sign-in session and security tokens). Our analytics tool does not use tracking cookies. If we introduce optional cookies in the future (for example for advertising), they will be preceded by a consent banner and this section will be updated.

We apply industry-standard measures: encrypted connections (TLS) everywhere, hashed session tokens, rate limiting on sensitive endpoints, and access to production systems restricted to the operators of the service.

If we change this policy we will update the date at the top of this page. For material changes we will notify registered users by email before the change takes effect.