Privacy Policy

1. Who we are (data controller)

For the purposes of data protection law, the data controller is Asymmetry Ltd, a company registered in England and Wales. This means we are responsible for deciding how and why your personal data is processed. You can contact us about privacy matters at [email protected].

2. The personal data we collect

We collect the following categories of personal data:

• Account data: name, email address, password (stored in hashed form), and account preferences, when you register.
• Billing data: subscription plan, billing history, and the billing details and tokens needed to process payments. Payments are handled by our payment processor, Stripe; your full card number is entered with Stripe and is never seen or stored by us.
• Usage data: how you interact with the Service: pages and features used, companies searched or viewed, session activity, and similar product analytics.
• Technical data: IP address, device and browser type, operating system, approximate location derived from IP, and similar metadata, collected automatically when you use the Service.
• Communications data: the content of messages you send us (for example support enquiries) and our correspondence with you.

We do not intentionally collect special category data (such as data about health, race, or political opinions). Please do not send us such data.

3. How we use your data and our lawful bases

Under UK GDPR we must have a lawful basis for each use of your data. Our uses and bases are:

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms, and you can ask us for more detail about that assessment at any time. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

4. Cookies and analytics

We use cookies and similar technologies to operate the Service, remember your session and preferences, keep the Service secure, and understand how it is used. Strictly necessary cookies are required for the Service to function and do not require consent. Non-essential cookies (such as analytics) are used only where permitted, and where consent is required we will ask for it and you can withdraw it at any time. You can also control cookies through your browser settings; disabling some cookies may affect how the Service works.

5. Sharing your data and our processors

We do not sell your personal data. We share it only as necessary, with:

• Service providers (processors) who act on our instructions, for example cloud hosting and infrastructure, payment processing (Stripe), email delivery, and product analytics. They may process your data only for the purposes we specify and under a written contract that requires appropriate safeguards.
• Professional advisers (such as lawyers, accountants and auditors) where necessary.
• Authorities or third parties where we are required to by law, to comply with legal process, or to protect our rights, users or the public.
• A successor entity in connection with a merger, acquisition or reorganisation, subject to this Policy.

Note that the financial and market data presented in the Service is sourced from third-party providers; that is data about companies and markets, not your personal data.

6. International transfers

Some of our providers may process data outside the UK or European Economic Area. Where we transfer personal data internationally, we ensure an appropriate safeguard is in place (such as an adequacy decision, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with any required addendum), so that your data continues to be protected to UK/EU standards.

7. How long we keep your data

We keep personal data only for as long as necessary for the purposes we collected it, including to provide the Service, comply with legal, accounting or reporting obligations, and resolve disputes. Account data is generally retained while your account is active and for a reasonable period afterwards; billing records are kept for the period required by law (typically up to six years for UK tax and accounting purposes). When data is no longer needed, we securely delete or anonymise it.

8. How we protect your data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration, including encryption in transit, access controls, hashed passwords, and limiting access to those who need it. No system is completely secure, and we cannot guarantee absolute security, but we work to protect your data and to respond appropriately to any incident, including notifying you and the regulator where we are legally required to.

9. Your rights

Subject to certain conditions, you have the following rights over your personal data under UK/EU data protection law:

• Access: to obtain a copy of the personal data we hold about you.
• Rectification: to have inaccurate or incomplete data corrected.
• Erasure: to have your data deleted in certain circumstances (the “right to be forgotten”).
• Restriction: to limit how we use your data in certain circumstances.
• Portability: to receive certain data in a structured, machine-readable format, or have it transferred to another controller.
• Objection: to object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent: where we rely on consent, you can withdraw it at any time without affecting prior processing.

To exercise any right, contact [email protected]. We will respond within the timeframes required by law (usually one month). We may need to verify your identity first. Exercising your rights is free in most cases.

10. Marketing

We will only send you marketing communications where we are permitted to do so. You can opt out at any time using the unsubscribe link in our emails or by contacting us. Opting out of marketing will not stop service or transactional messages that are necessary to operate your account.

11. Children

The Service is intended for adults and is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

12. Changes to this Policy

We may update this Policy from time to time. The current version, with its effective date, is published on this page. Where changes are material, we will take reasonable steps to notify you. Please review this Policy periodically.

13. Contact and complaints

If you have any questions, requests or concerns about how we handle your personal data, contact us at [email protected]. We hope to resolve any concern, but you also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk, or with your local supervisory authority if you are in the EU.

Read together with our Terms of Service and Disclaimer & Risk Warning. Questions? Contact [email protected].