Privacy Policy

Who we are

Autrady is run by Autrady EOOD, a company registered in Bulgaria. We decide how your personal data is used, which makes us its controller under the EU General Data Protection Regulation (GDPR). For anything about your data, email us at [email protected].

Company

Autrady EOOD (in Bulgarian: „Аутрейди“ ЕООД)

Registered office

Varna, Bulgaria

Company number

UIC 206828616, Bulgarian Commercial Register

VAT

BG206828616

Email

[email protected]

What we collect

• Your account. When you sign in with Google, we receive your email address and an identifier for your Google account. We never see your Google password. We also record when you created your account and when you last signed in.
• Billing. If you subscribe, Stripe takes the payment. We store the identifiers Stripe gives us for you and your subscription, and the subscription's status. We never see or store your card number.
• Your work. The signal files you upload, and the strategies, backtests and audit results you create.
• Your tracks. If you start a track: its name and description, the public profiles you link and their proof codes, every pick you log with the time we received it, and the statistics we compute. To check a proof code, our server reads the public page you gave us.
• How you found us. On our public pages we count visits and clicks with our own measurement. It sets no cookies and stores no IP address, browser details or account. Each record holds only the page, what happened (such as a click on "Start free trial"), the campaign tags in the link you followed (utm_source, utm_medium and utm_campaign) and the name of the site that sent you. Your browser keeps those tags in session storage for the open tab only, so that if you sign up, we save them with your new account. If your browser sends a Do Not Track or Global Privacy Control signal, or you are signed in, we count nothing.
• Technical data. Traffic to the site passes through Cloudflare, which processes your IP address to deliver and protect it. Our server keeps error logs for troubleshooting. Those logs don't record your IP address.

Cookies

We use only cookies the site needs to work: one that keeps you signed in, one for your session, one that protects forms against forgery, and short-lived ones used while you sign in with Google. There are no analytics, advertising or tracking cookies. Because these cookies are strictly necessary, we don't ask for consent to them. Counting visits uses no cookies at all (see How you found us above).

Why we use it

• To run the service you signed up for: your account, your files and your audits. The legal basis is our contract with you (GDPR art. 6(1)(b)).
• To take payment and keep the accounting records the law requires (art. 6(1)(b) and (c)).
• To keep the service secure and working, and to prevent abuse. This is our legitimate interest (art. 6(1)(f)).
• To learn which pages and links bring people to Autrady, so we can improve the site. This is our legitimate interest (art. 6(1)(f)). Visit counts carry no identifiers, and you can opt out with your browser's Do Not Track or Global Privacy Control setting.
• To answer when you email us (art. 6(1)(b) and (f)).

We don't sell your data or use it for advertising, and we make no automated decisions about you that have legal or similar effects.

What a track makes public

Signal files stay private. Tracks are public on purpose: their value to buyers is that anyone can check them and nothing is removed. For a track whose profile is proven, anyone can see the track's name and description, the proven profile links, the time and hash of every entry, each pick's ticker and dates once its embargo has ended, and the statistics and verdict. Your email address and Google account are never shown.

We publish this on the basis of our contract with you (art. 6(1)(b)) and our legitimate interest in keeping public records complete and tamper-evident (art. 6(1)(f)). Picks are kept for as long as Autrady runs and are not deleted on request, because a record that can lose its bad picks proves nothing. When you close a track or delete your account, the track takes no more picks and keeps a public summary (how long it ran, how many picks, the verdict and the chain head) instead of the full list. You can object to this at [email protected], and we will weigh your reasons.

Who processes it for us

• Google handles sign-in.
• Stripe handles payments. Stripe is also a controller in its own right for fraud prevention and its legal duties, under its own privacy policy.
• Cloudflare delivers and protects the site and forwards email sent to our address.
• Our email provider stores the messages you send us.

The application and its database run on our own server in Bulgaria. To fetch market prices we send only ticker symbols, never your personal data.

Transfers outside the EU

Google, Stripe and Cloudflare may process data outside the EU, including in the United States. They rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

How long we keep it

• Your account, the campaign tags saved with it and your work: for as long as your account exists. When you delete your account, we delete them from our database, and any copies in backups are gone within 30 days.
• Tracks: drafts are deleted with your account. A track that has started is closed and kept, as described above.
• Payment and invoice records: 10 years, as the Bulgarian Accountancy Act requires.
• Visit and click counts hold no identifiers. We keep them to compare campaigns over time.
• Error logs: overwritten automatically as new entries arrive.

Your rights

You can ask to see, correct, export or delete your personal data, to restrict how we use it, or object to that use. You can download your data or delete your account from your account settings, or email us and we'll do it. We reply within one month.

If you think we've handled your data wrongly, you can complain to the Bulgarian Commission for Personal Data Protection (2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg) or to the data protection authority where you live.

Age

Autrady is for adults. Please don't use it if you're under 18.

Changes to this policy

When we change this policy, we update it here with a new date. If a change affects how we use your data, we email account holders before it takes effect.