Privacy Policy

This policy explains what Markov does with personal data, and your rights over it under the UK GDPR and the Data Protection Act 2018. The controller is Marcu Calandea, at 24 Barbastelle Crescent, Hethersett, NR9 3FR, United Kingdom.

What we collect

Account data

Your email address, and a password stored only as a hash by our authentication provider — we never see or store the password itself. Also the date you signed up and when you last signed in.

Trading data you enter

The trades you log — symbol, direction, entry and exit prices, size, times, notes, and calculated profit or loss. Where you edit a trade we also keep the original values and the time of the edit, so the journal stays honest.

Account and rule settings

Prop firm accounts you track (firm name, account size, phase, profit target, drawdown limits), the rules you set, and the violations recorded when logged activity breaches them.

Subscription data

Your subscription status, trial end date, and the Stripe customer and subscription identifiers linked to your account. We do not receive or store your full card details at any point — you enter them on Stripe's own page and they go directly to Stripe.

Usage statistics

When you view a page on this site, Vercel Web Analytics records that page view: the time, the page's address, the site you came from, the approximate location (country, region and city) worked out from your connection, your device type, operating system and browser and their versions, and the version of the analytics script. Before anything is sent, we strip the page address down to its path: anything after a ? or # is removed, and record identifiers (such as a trade's ID) are replaced with a placeholder. We record page views only — no clicks, form entries, email addresses, user IDs, trading data or account names.

Why we use it, and our lawful basis

• To provide the service — storing your trades, running the rule engine, showing your history. Lawful basis: performance of a contract.
• To bill you — managing trials, subscriptions and cancellations. Lawful basis: performance of a contract.
• To keep the service secure and working — diagnosing faults, preventing abuse. Lawful basis: our legitimate interests in operating a secure service.
• To understand how the site is used — which pages are visited, and where visitors come from, in aggregate. Lawful basis: our legitimate interests in improving the site.
• To meet legal obligations — for example retaining records needed for tax. Lawful basis: legal obligation.

We do not sell personal data, we do not use it for advertising, and we do not carry out profiling or automated decision-making that produces legal effects.

Who we share it with

These are the service providers we share personal data with. We use no others.

Supabase

Hosts the database and handles authentication. Your account and all data you enter are stored there. Data is held in the UK (London region). Acts as a data processor on our instructions.

Stripe Payments UK Ltd

Processes subscription payments on Stripe-hosted checkout and billing pages. We send Stripe your email address and an internal account identifier so a payment can be matched to your account; you give Stripe your card and billing details directly. Stripe acts as our processor for handling payments, and as an independent controller for its own purposes, such as preventing fraud and meeting its legal obligations — see stripe.com/privacy.

Vercel

Serves the website. Processes technical request data such as IP address in the course of delivering pages. Also provides Vercel Web Analytics, which records the page views described above. Vercel states that these are recorded anonymously, without being tied to an individual or an IP address; that visitors are told apart by a hash created from the incoming request rather than by a cookie; and that this is discarded after 24 hours. We see only aggregated statistics.

We may also disclose data where the law requires it. If the business is ever sold, data may transfer with it, and you would be told first.

Cookies and local storage

This site sets no cookies of its own, and our analytics uses none: Vercel Web Analytics counts page views without cookies, as described above. We use no advertising pixels and no tracking across other websites.

To keep you signed in, our authentication provider stores a session token in your browser's local storage, under a key beginning sb-. It holds an access token, a refresh token and your basic account details. It is not a cookie and is not sent automatically with every request — the app reads it and attaches it deliberately. It is strictly necessary for signing in, and clearing your browser storage signs you out.

Checkout and the billing portal are pages on Stripe's own domains (checkout.stripe.com and billing.stripe.com), not part of this site. Stripe may set cookies there for security and fraud prevention, governed by Stripe's privacy policy. No Stripe code runs on markov.company.

How long we keep it

• Account, trade and rule data: for as long as your account exists.
• After you delete your account: removed from the live database immediately, and from routine backups within 30 days.
• Billing and transaction records: retained by us, and by Stripe, for six years to meet UK tax and accounting obligations.
• Usage statistics: Vercel keeps them for at least 12 months, the reporting period on our plan, and may keep them longer.

Your rights

Under the UK GDPR you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• receive your data in a portable, machine-readable format;
• restrict or object to how we process it;
• withdraw consent where processing relies on it.

To exercise any of these, email support@markov.company. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

You can also complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to resolve it first.

International transfers

Our database is hosted in the UK (London). Some service providers, including Stripe and Vercel, may handle data outside the UK, for example in the United States; where they do, transfers are covered by UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

Security

Data is encrypted in transit. Access to your records is enforced at the database level, so one account cannot read another's rows. Payment card data never reaches our systems.

Contact

support@markov.company
Marcu Calandea, 24 Barbastelle Crescent, Hethersett, NR9 3FR, United Kingdom