Privacy Policy (GDPR)

Last Updated: February 3, 2026

1. DATA CONTROLLER

The controller of your personal data is OkStock, operating in accordance with the General Data Protection Regulation (GDPR). For any inquiries, contact okstock.app@gmail.com.

2. DATA WE COLLECT

Account Data: Name, email address, and hashed passwords.
Financial Records: We do not store credit card numbers. All payments are processed via our secure PCI-DSS compliant payment provider.
Technical Data: IP address, browser type, and usage patterns (via Posthog).

3. LEGAL BASIS FOR PROCESSING

We process your data to:
a) Fulfill our contract with you (providing the service).
b) Comply with legal obligations (tax and accounting).
c) Pursue our legitimate interests (improving the platform via analytics).

4. THIRD-PARTY DATA TRANSFERS

Your data may be shared with essential sub-processors, including:
- Posthog: For product analytics.
- Financial Modeling Prep: For fetching market data based on your queries.
- Payment Gateway: To process your subscription.

5. YOUR RIGHTS (GDPR)

As a resident of the European Economic Area (EEA), you have the right to:
- Access, correct, or delete your data.
- Object to processing or request data portability.
- Withdraw consent at any time.
- Lodge a complaint with a data protection authority (e.g., UODO in Poland).

6. DATA RETENTION

We keep your data as long as your account is active. Financial transaction records are stored for the period required by local tax laws (typically 5-6 years in Poland).