Privacy Policy

1. Data controller

2. Data collected

Account data: email address and, where applicable, a chosen name or identifier, managed through our authentication provider Clerk. Passwords are managed and encrypted by Clerk; the publisher never has access to them.

Subscription and billing data: plan, status, dates and customer identifier, managed through our payment provider Lemon Squeezy (Merchant of Record). Card data is processed exclusively by Lemon Squeezy and its providers; the publisher never has access to it.

Content you create in the app: portfolio composition, watchlist, reference capital and settings you enter.

Technical data: connection logs, IP address and timestamps, for security and the proper operation of the service.

No personal data is sent to the market-data providers (Twelve Data, Finnhub): only queries about asset symbols are sent to them, with no information identifying you.

3. Purposes and legal bases

Providing the service, managing your account and subscription: performance of the contract (Art. 6.1.b GDPR).

Ensuring security, preventing fraud and improving the service: the publisher's legitimate interest (Art. 6.1.f).

Complying with our legal and accounting obligations: legal obligation (Art. 6.1.c).

The messages you receive are purely transactional (account verification, payment receipts, service notifications). No marketing is carried out without your consent.

4. Recipients and processors

Your data is never sold. It is accessible to the publisher and to its technical processors, acting on its instructions and bound by confidentiality obligations:

Clerk — authentication and account management;

Stripe — payment processing and invoicing;

Supabase — database hosting;

Vercel — application hosting, as well as audience and performance measurement (traffic statistics and load times), carried out without cookies or personally identifying data.

5. Transfers outside the European Union

Some of these providers are established or operate outside the European Union, in particular in the United States. Where applicable, such transfers are governed by appropriate safeguards within the meaning of the GDPR (the European Commission's standard contractual clauses or an applicable adequacy mechanism).

6. Retention period

Account data is kept for as long as your account is active. After your account is deleted, it is erased within a reasonable time, except for data required to meet our legal obligations (in particular accounting records and invoices, kept for the statutory period and managed by Lemon Squeezy).

Technical logs are kept for a limited time, for security purposes.

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. You can exercise these rights at any time by writing to contact@tranzhelp.com.

You can also delete your account from your space or by contacting us, and withdraw at any time any consent you may have given.

If you believe your rights are not being respected, you may lodge a complaint with the French data-protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr, or with your local supervisory authority.

8. Cookies

TranzHelp uses only strictly necessary cookies for the operation of the service (authentication, security and keeping your session), set by our authentication provider. These cookies are exempt from prior consent. The site uses no advertising or audience-measurement cookies. You can configure your browser to block them, but access to your account may then no longer work.

9. Security

The publisher implements reasonable technical and organisational measures to protect your data: encryption in transit (HTTPS), access controls and the use of established providers. As no transmission over the Internet is completely secure, however, absolute security cannot be guaranteed.

10. Minors

The service is intended exclusively for adults. It is not directed at minors and no data is knowingly collected from them.

11. Changes

This policy may be updated to reflect changes to the service or to the applicable regulations. The date of the last update appears at the top of the page; changes take effect upon publication.