Privacy Policy
Last updated: July 2026
1. Data controller
The controller of personal data collected through the Ballad Markets service is the entity that owns it. For any privacy-related queries, please contact us through the support channel available to subscribers.
2. Data we collect
We collect the following personal data:
- Account data: email address
- Billing data: managed directly by Stripe (not stored by us)
- Usage data: access logs, pages visited, dashboard actions
- Technical data: IP address, browser type, operating system
3. Purpose and legal basis for processing
We process your data for the following purposes and legal bases:
- Service delivery (contract performance, Art. 6.1.b GDPR): managing your account, dashboard access, and billing
- Transactional communications (legitimate interest, Art. 6.1.f GDPR): welcome emails, onboarding, and subscription management
- Legal compliance (legal obligation, Art. 6.1.c GDPR): retention of billing data as required by applicable tax regulations
- Commercial communications (consent, Art. 6.1.a GDPR): only if you have expressly opted in
4. Data retention
We retain your data for the period your account remains active and, once cancelled, for the minimum period required by applicable tax and commercial regulations (generally 5–7 years for billing data). Access and usage data are retained for 12 months.
5. Recipients and transfers
Your data may be shared with the following third parties:
- Supabase Inc. (USA): database and infrastructure provider. Transfer covered by Adequacy Decision or Standard Contractual Clauses.
- Stripe, Inc. (USA): payment processor. Transfer covered by Adequacy Decision or Standard Contractual Clauses.
- Postmark / Wildbit LLC (USA): transactional email provider. Transfer covered by Standard Contractual Clauses.
- Vercel Inc. (USA): hosting infrastructure. Transfer covered by Standard Contractual Clauses.
We do not sell or transfer your data to third parties for commercial purposes.
6. Your rights
As a data subject, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Object to processing or request its restriction
- Data portability
- Withdraw consent at any time
- Lodge a complaint with the relevant data protection authority
To exercise any of these rights, please contact us through the dashboard support channel.
7. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. Data is transmitted encrypted via TLS and stored in secure environments with access controls.
8. Cookies
The service uses cookies. Please see our Cookie Policy for detailed information.