Legal
Privacy Policy
1. Who is responsible for your data
Genesis Desk is the controller of the personal data described here, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact us about privacy, including any data request, at support@genesisdesk.trade.
2. What we collect
| Data | Why | Lawful basis |
|---|---|---|
| Account details: name, email address, Discord handle, username | To create and run your account, send invitations and service emails, and give support. | Contract |
| App sign-in records and presence heartbeats (account identifier, time, app version, whether the app is signed in) | To check your subscription is active, keep the Service secure and prevent account sharing. | Contract; legitimate interests (security) |
| Billing records: plan, amounts, dates, payment status, billing country (via Stripe) | To take payment, keep accounting and tax records. | Contract; legal obligation |
| Support emails and their contents | To answer your questions and improve the Service. | Contract; legitimate interests |
3. What we do not collect
- Card details. Payments are processed by Stripe. Your card number is entered with Stripe and is never received or stored by us.
- Broker credentials. Your broker login is stored only on your own computer, in your operating system's keychain or credential store, and is used by the app to connect directly to your broker. It is never sent to us.
- Your trading activity. Orders, positions and account data travel between the app on your computer and your broker. We do not receive them as part of the Service, except where you choose to send us information, for example in a support email.
4. Who we share data with
We use these processors, under contracts that require them to protect your data:
- Cloudflare: hosting of this website and of the access gate that checks your subscription.
- Stripe: payment processing and subscription billing records. Stripe also acts as an independent controller for some data, such as fraud prevention; see Stripe's privacy policy.
We do not sell personal data. We may disclose data where the law requires it, or to protect our rights.
5. International transfers
Our processors may handle data outside the UK, including in the United States. Where they do, transfers are protected by appropriate safeguards such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.
6. How long we keep data
- Account details: while your account is open and for up to 12 months after it closes.
- Sign-in records and presence heartbeats: up to 90 days.
- Billing records: 6 years after the end of the financial year they relate to, to meet UK tax and accounting rules.
- Support emails: up to 24 months after the conversation ends.
7. Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, and to data portability, subject to legal limits. To exercise any right, email support@genesisdesk.trade with the subject Data request. We will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to resolve it first.
8. Security
We use encryption in transit, access controls and reputable providers to protect your data. No system is completely secure, and you are responsible for the security of your own computer and logins.
9. Cookies
This website does not use advertising or analytics cookies. Our hosting provider may set strictly necessary cookies for security. Stripe sets its own cookies on its checkout and billing pages.
10. Children
The Service is not for anyone under 18 and we do not knowingly collect their data.
11. Changes
We will post any update here with a new effective date, and tell you by email about significant changes.