Privacy Policy

Last updated: April 13, 2026

1. Data Controller

MarketPulse
Email: alerts.marketpulse@gmail.com

2. What Data We Collect

We collect the minimum data necessary to operate the Service:

Data Purpose Storage
Email address Account identification, login, service communications Amazon Cognito (AWS)
Password (hashed) Authentication Amazon Cognito (SRP — never stored in plaintext)
API key MCP authentication, token tracking Amazon DynamoDB
Token balance Usage tracking (aggregate count only) Amazon DynamoDB

What we do NOT collect

  • We do not store the symbols you query, the tool results, or your AI conversations.
  • We do not use cookies for tracking or analytics.
  • We do not share or sell your data to third parties.
  • We do not collect payment information (the service is free during beta).

Note: If you use the "Suggest Feature" tool, the text of your suggestion is stored in our database so we can review and prioritize it. No other tool input is retained.

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases as defined by the General Data Protection Regulation (EU) 2016/679:

  • Article 6(1)(b) — Performance of a contract: Processing your email and API key is necessary to provide the Service.
  • Article 6(1)(f) — Legitimate interests: Aggregate usage metrics (token counts) for abuse prevention and service improvement.

4. Data Processors

We use the following AWS services to process and store data:

  • Amazon Cognito — User authentication and email verification
  • Amazon DynamoDB — API key and token storage
  • AWS Lambda — Serverless compute for API processing
  • Amazon S3 / CloudFront — Static website hosting

AWS acts as a data processor under a Data Processing Agreement (DPA) and is compliant with the EU-US Data Privacy Framework.

5. International Data Transfers

Data is processed on AWS infrastructure in the us-east-1 (N. Virginia) region. This constitutes a transfer of personal data outside the European Economic Area (EEA).

These transfers are protected by:

  • The EU-US Data Privacy Framework (AWS is a certified participant);
  • Standard Contractual Clauses (SCCs) as a supplementary safeguard in the AWS DPA.

For questions about data transfers, contact us at alerts.marketpulse@gmail.com.

6. Data Retention

  • Account data: Retained while your account is active.
  • Deletion: Upon account deletion request, all personal data is removed within 30 days.
  • Lambda logs: Automatically deleted after 7 days (CloudWatch log retention policy).

7. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

Right of access Request a copy of all personal data we hold about you.
Right to rectification Request correction of inaccurate data.
Right to erasure Request deletion of your account and all associated data.
Right to data portability Receive your data in a structured, machine-readable format.
Right to object Object to processing based on legitimate interests.
Right to lodge a complaint File a complaint with your local Data Protection Authority.

To exercise any of these rights, email alerts.marketpulse@gmail.com. We will respond within 30 days.

8. Cookies and Tracking

MarketPulse does not use cookies for tracking, analytics, or advertising. The only client-side storage used is browser localStorage for maintaining your Cognito authentication session. This is technically necessary for the Service to function and does not require cookie consent under EU ePrivacy Directive (Directive 2002/58/EC, Article 5(3)).

9. Children

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date will be revised accordingly. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

For privacy-related inquiries, data access requests, or complaints:

Email: alerts.marketpulse@gmail.com