PRIVACY
How The Observer handles personal data.
This notice describes the information used to provide accounts, catalyst access, purchases, security, cancellation requests, transactional emails and feedback.
1. Controller and contact
The Observer, trade name registered under KVK 94591423, is responsible for the processing described in this notice.
Address: Vliestroom 159, 2401 VD Alphen aan den Rijn, The Netherlands
VAT ID: NL005093674B80
Privacy/support: easytradeadvice@gmail.com
2. Information we process
- Account data: account identifier, email address and authentication/session information.
- Entitlements: unlocked catalyst identifiers, monthly free-unlock usage, credit balances, account role and access status.
- Purchases: product and Stripe identifiers, selected catalyst, payment references, status, amount/currency, fulfilment status, test/live status, customer email, receipt URL and immediate-supply consent version/time.
- Cancellation/withdrawal requests: customer name, purchase reference, email, optional reason/details, request status, confirmation status and timestamps.
- Transactional email: email address and the minimum purchase/request data needed to deliver confirmations and support records.
- Feedback: category, message and any optional contact detail supplied.
- Technical/security data: IP address, browser/device information, timestamps, logs and rate-limit/security information where needed to operate and protect the service.
3. Purposes and legal bases
We use personal data to create and secure accounts, remember purchased/unlocked access, enforce free-unlock limits, fulfil purchases, create and deliver confirmations, preserve transaction and consent evidence, process cancellation requests, prevent abuse, respond to support, troubleshoot problems and meet accounting or legal obligations.
Where GDPR applies, processing may rely on performance of a contract or pre-contract steps, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where specifically required.
4. Service providers
- Supabase for authentication, database storage and server functions;
- Stripe for hosted checkout, payment processing, tax calculation where enabled, fraud prevention and receipts;
- Vercel for web hosting/deployment;
- Google when Google OAuth sign-in is selected;
- Resend for transactional purchase, support and cancellation/withdrawal emails when enabled.
Providers may process data outside the user's country under their applicable contractual and legal transfer mechanisms.
5. Cookies and browser storage
Authentication can use cookies or browser storage needed for account continuity. The watchlist uses local browser storage. Stripe-hosted Checkout may use its own cookies or similar technologies. The Observer does not currently use behavioural advertising or advertising-profile tracking.
6. Retention
Account and entitlement data is retained while needed to provide the account and purchased access. Payment, consent, accounting, transactional-email and dispute records may be kept longer where legally or operationally necessary. Feedback and security logs are retained only for as long as reasonably needed for support, security and service improvement.
7. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability, and may withdraw consent where processing relies on consent. You may also complain to a competent data-protection authority. Send requests to easytradeadvice@gmail.com. Do not send passwords or full payment-card data.
8. Security
The Observer uses authentication, server-side fulfilment, restricted internal database access, payment-signature checks, rate limits, origin controls, test/live separation controls and browser security headers. No online service can guarantee absolute security.
9. Changes
This notice may be updated when providers, features, legal requirements or processing activities change. The updated date will be shown on this page.