Privacy Policy

Who we are

Autrady is run by Autrady EOOD, a company registered in Bulgaria. We decide how your personal data is used, which makes us its controller under the EU General Data Protection Regulation (GDPR). For anything about your data, email us at [email protected].

Company

Autrady EOOD (in Bulgarian: „Аутрейди“ ЕООД)

Registered office

Geo Milev St., bl. 83, fl. 14, apt. 67, 9009 Varna, Bulgaria

Company number

UIC 206828616, Bulgarian Commercial Register

VAT

BG206828616

Email

[email protected]

What we collect

• Your account. When you sign in with Google, we receive your email address and an identifier for your Google account. We never see your Google password. We also record when you created your account and when you last signed in.
• Billing. If you subscribe, Stripe takes the payment. We store the identifiers Stripe gives us for you and your subscription, and the subscription's status. We never see or store your card number.
• Your work. The signal files you upload, and the strategies, backtests and audit results you create.
• Technical data. Traffic to the site passes through Cloudflare, which processes your IP address to deliver and protect it. Our server keeps error logs for troubleshooting. Those logs don't record your IP address.

Cookies

We use only cookies the site needs to work: one that keeps you signed in, one for your session, one that protects forms against forgery, and short-lived ones used while you sign in with Google. There are no analytics, advertising or tracking cookies. Because these cookies are strictly necessary, we don't ask for consent to them.

Why we use it

• To run the service you signed up for: your account, your files and your audits. The legal basis is our contract with you (GDPR art. 6(1)(b)).
• To take payment and keep the accounting records the law requires (art. 6(1)(b) and (c)).
• To keep the service secure and working, and to prevent abuse. This is our legitimate interest (art. 6(1)(f)).
• To answer when you email us (art. 6(1)(b) and (f)).

We don't sell your data or use it for advertising, and we make no automated decisions about you that have legal or similar effects.

Who processes it for us

• Google handles sign-in.
• Stripe handles payments. Stripe is also a controller in its own right for fraud prevention and its legal duties, under its own privacy policy.
• Cloudflare delivers and protects the site and forwards email sent to our address.
• Our email provider stores the messages you send us.

The application and its database run on our own server in Bulgaria. To fetch market prices we send only ticker symbols, never your personal data.

Transfers outside the EU

Google, Stripe and Cloudflare may process data outside the EU, including in the United States. They rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

How long we keep it

• Your account and your work: for as long as your account exists. When you delete your account, we delete them from our database, and any copies in backups are gone within 30 days.
• Payment and invoice records: 10 years, as the Bulgarian Accountancy Act requires.
• Error logs: overwritten automatically as new entries arrive.

Your rights

You can ask to see, correct, export or delete your personal data, to restrict how we use it, or object to that use. You can download your data or delete your account from your account settings, or email us and we'll do it. We reply within one month.

If you think we've handled your data wrongly, you can complain to the Bulgarian Commission for Personal Data Protection (2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg) or to the data protection authority where you live.

Age

Autrady is for adults. Please don't use it if you're under 18.

Changes to this policy

When we change this policy, we update it here with a new date. If a change affects how we use your data, we email account holders before it takes effect.