This policy explains what EquityBias collects, why, and what you can ask us to do about it. We are based in the EU, so the GDPR applies to everything described here.
Your account. Your email address and an encrypted password, held by our database provider Supabase. We never see the password itself.
Your subscription. If you subscribe, Lemon Squeezy handles the payment as Merchant of Record and holds your card and billing details. We never receive your card number. What reaches us is your plan, whether the subscription is active, and when the current period ends.
What you save in the product. The stocks in your portfolio or watchlist, and your display preferences such as the dashboard layout and light or dark theme.
Email and notifications. If you sign up for the daily digest, your address and the tickers you asked us to follow. If you turn on browser notifications, the push endpoint your browser issues.
Usage data. Which pages are opened, when, from what country and device type, and where the visit came from. For visitors who are not signed in this is anonymous: a random id that lives in one browser tab and is gone when you close it. For signed-in members it is linked to the account, so we can see whether members come back and which parts of the product they use. Country comes from the network connection and we do not store your IP address or run any third-party analytics or advertising tracker.
Account, subscription and saved data are processed to deliver the service you signed up for, which is a contract. Usage data is processed under legitimate interest: we need to know whether the product is used in order to improve it. It is our own data, kept on our own infrastructure, never sold and never shared with advertisers. Email digests and browser notifications are sent only after you ask for them, and every digest carries an unsubscribe link.
We may look at your usage to understand where the product falls short, and to reach out with something useful. We do not make automated decisions about you, and nothing about your account depends on how often you visit.
Product news and reminders are a separate choice. There is an unticked box at signup, and a switch on your account page you can use to change your mind at any time. We keep the date you agreed, so we can show that we asked. Receipts, password resets and subscription notices are service messages and are sent whatever that switch says.
Usage events are deleted automatically after 90 days. Account, subscription and saved data are kept while your account exists, and billing records for as long as EU accounting rules require. Email subscriptions are kept until you unsubscribe.
We use essential cookies to keep you signed in. Your browser also stores small preference values locally, such as your chosen theme, and a temporary id used for the usage measurement described above. There are no advertising cookies and no cross-site trackers.
Supabase (database and authentication), Vercel (hosting), Lemon Squeezy (payments and invoicing), Resend (email delivery). They process data on our behalf, under contract, and for no other purpose.
You can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or object to the usage measurement. Write to us and we will act within one month. Deleting your account removes your profile, your saved data and your usage history. If you think we have handled your data badly, you can complain to the Danish Data Protection Agency, Datatilsynet.
For any privacy question, write to contact@equitybias.com.
Last updated: September 2026