Privacy notice
English translation, provided for convenience. The binding version of this document is the Spanish original: in case of any discrepancy or difference in interpretation, the Spanish version prevails.
1 · The essentials
We process the minimum needed to run the service: your email, your sessions and your interface preferences. We do not collect your trading data — NeuraGex does not connect to your broker and does not know your orders, positions or results. Your card details are handled by Paddle; they never pass through us. We do not sell personal data or use it for advertising.
2 · What data we process and why
- Account: email address and password (stored only as a hash). To authenticate you and communicate with you.
- Sessions: session identifier, a device label (e.g. "Safari on iPad") and a hash of the IP address. To enforce the limit on simultaneous sessions, tell you which device was signed out and detect anomalous access.
- Preferences: saved views, layers and palette of the Terrain. So your setup follows you across devices.
- Subscription status: plan, trial period dates and a history of status changes. To serve what you purchased and apply the archive access policy.
- Lifecycle emails: a record of which notices we sent you (welcome, pre-charge notice, confirmation), so we do not send them twice.
- Sign-in attempts: a temporary record of failed attempts by email and IP, to stop brute-force attacks.
The market data the system shows (positioning, measurements, readings) is platform data, not your personal data.
3 · Payments
Paddle is the merchant of record: it receives and processes your payment and billing data under its own privacy policy. NeuraGex receives from Paddle only the status of your subscription (sign-up, successful charge, failure, cancellation), never your card details.
4 · Providers that process data on our behalf
- Supabase — database and authentication (email, password hash, sessions).
- Railway — infrastructure for the application server.
- Vercel — hosting of the site and the interface.
- Paddle — payments and billing, as merchant of record.
- Resend — delivery of transactional emails.
- Anthropic — generation of market readings from platform data; it does not receive your personal data.
5 · Retention
We keep your data for as long as your account exists. If your subscription expires, the account and your history are kept — we believe your history is yours — until you request deletion. Sign-in attempt records are kept only for as long as their security function requires.
6 · Your rights
You can request access to, correction or deletion of your personal data, and object to specific processing, by writing to lavamaxi+neuragex@gmail.com from your account's email address. We reply within a reasonable time and free of charge. Deleting the account deletes your personal data; whatever the law requires us to keep may remain (e.g. billing records, held by Paddle).
7 · Security
We apply proportionate technical measures: hashed passwords, sessions with rotated tokens and reuse detection, encryption in transit, and per-user isolation in the database. No system is infallible; if an incident affects your data, we will tell you.
8 · Changes to this notice
If we change this notice substantially, we will announce it by email or in the product before the change takes effect.