Privacy Policy
Last Updated: 15 January 2025
At xalendriosa, we take your privacy seriously. This policy explains how we collect, use, and protect your personal information when you use our investment analysis platform. We're based in the United Kingdom and comply with UK GDPR and Data Protection Act 2018 requirements.
Information We Collect
We collect different types of information depending on how you interact with our platform. Some of this happens automatically, and some you provide directly.
Account Information
When you create an account, we ask for basic details: your name, email address, and a secure password. If you're using our premium features, we'll also need billing information. We don't see your full card details though—our payment processor handles that securely.
Investment Data
To provide personalised analysis, we collect information about your investment interests and portfolio preferences. This might include securities you're tracking, analysis parameters you set, and historical data you've requested. You control what you share here.
Important: We never ask for your actual brokerage account credentials or access to your funds. xalendriosa is an analysis tool—we don't execute trades or manage money on your behalf.
Usage Information
Like most websites, we collect technical data about how you use our platform. This includes your IP address, browser type, pages visited, time spent on features, and which tools you use most often. This helps us understand what works and what doesn't.
- Device information and operating system
- Login dates and session duration
- Feature usage patterns and preferences
- Search queries within the platform
- Error reports and performance data
How We Use Your Information
We're not in the business of selling data. Everything we collect serves a specific purpose for making xalendriosa work better for you.
Platform Operations
Your account information lets us authenticate you, maintain your preferences, and provide customer support. We use your usage data to improve our algorithms and identify which features need work. Sometimes patterns in the data reveal bugs we wouldn't have spotted otherwise.
Personalisation
We analyse your investment tracking patterns to suggest relevant features and content. If you frequently analyse technology stocks, we might highlight new tech sector tools. This personalisation happens algorithmically—no human is reading through your portfolio choices.
Communication
We'll send you essential emails about your account: security alerts, major platform updates, and billing notifications. If you opt in, we'll also share educational content and new feature announcements. You can adjust these preferences anytime in your account settings.
Purpose | Legal Basis | Retention Period |
---|---|---|
Account management | Contractual necessity | Duration of account plus 6 months |
Service improvement | Legitimate interest | 24 months from collection |
Marketing communications | Consent | Until consent withdrawn |
Legal compliance | Legal obligation | As required by law (typically 6-7 years) |
Sharing and Third Parties
We work with a small number of trusted service providers who help us run xalendriosa. These companies only access the minimum data they need, and they're bound by strict confidentiality agreements.
Service Providers
- Cloud hosting: We use secure UK-based servers to store and process your data
- Payment processing: A PCI-compliant processor handles transactions
- Analytics: We use privacy-focused tools to understand platform usage
- Email delivery: A service provider helps send account notifications
We never sell or rent your personal information to advertisers or data brokers. If someone approaches us wanting to buy user data, the answer is always no.
Legal Requirements
There are rare situations where we might need to disclose information: valid legal requests from UK authorities, protecting xalendriosa or users from fraud, or enforcing our terms of service. We'll always review such requests carefully and only share what's legally required.
Your Rights Under UK GDPR
UK data protection law gives you significant control over your personal information. Here's what you can do:
Access and Portability
You can request a copy of all personal data we hold about you. We'll provide this in a structured, commonly used format within one month. If you want to move to another platform, we'll help you export your data in a usable format.
Correction and Deletion
Found something inaccurate in your account? You can update most information directly in your settings. For deletion requests, we'll remove your personal data within 30 days, though we may need to retain some information for legal or accounting purposes.
To exercise any of these rights, email us at support@xalendriosa.com with "Data Rights Request" in the subject line. We'll verify your identity and respond promptly.
Objection and Restriction
You can object to certain types of processing, particularly for marketing purposes. Just toggle the relevant switches in your account preferences. If you want us to temporarily restrict how we process your data while we investigate a concern, let us know.
Automated Decision-Making
We use algorithms to personalise your experience and suggest relevant features. These automated decisions don't have legal effects on you—they just help the platform work better. You can always ignore suggestions and use xalendriosa however suits you best.
Security Measures
Protecting your data is fundamental to what we do. We've implemented multiple layers of security to keep information safe.
Technical Safeguards
All data transfers use TLS encryption—the same technology banks rely on. Your password is hashed with bcrypt, so even we can't see what it is. We regularly scan for vulnerabilities and apply security patches promptly. Access to our systems requires multi-factor authentication.
Operational Security
Only authorised team members can access user data, and only when necessary for support or maintenance. We maintain detailed access logs and conduct regular security training. Our infrastructure is monitored around the clock for suspicious activity.
No system is completely invulnerable though. If we ever experience a data breach that affects you, we'll notify you within 72 hours and explain what happened, what information was involved, and what steps we're taking.
Data Retention
We don't keep information longer than necessary. Different types of data have different retention schedules based on their purpose.
Active Accounts
While your account is active, we retain the information needed to provide our services. Usage logs are typically kept for 24 months to help with product development, then aggregated or deleted. Financial records are kept for seven years to comply with UK accounting requirements.
Closed Accounts
When you close your account, we delete your personal information within six months. We may retain some anonymised data for analytics—like "users who analysed tech stocks also used our screening tool"—but this can't be traced back to you. Backup systems are purged within 90 days of account closure.
If you want immediate deletion rather than waiting for the standard timeline, just ask. We'll expedite the process while maintaining any records we're legally required to keep.
Cookies and Tracking
xalendriosa uses cookies to function properly. When you first visit, we'll ask for your consent for non-essential cookies.
Essential Cookies
These keep you logged in, remember your preferences, and enable core platform features. We can't provide the service without these, so they don't require consent. They expire when you close your browser or after your session ends.
Analytics Cookies
We use privacy-respecting analytics to understand how people use xalendriosa. This helps us identify confusing features or technical issues. These cookies don't track you across other websites, and we anonymise IP addresses. You can opt out in your account settings.
We don't use advertising cookies or pixels from social media platforms. Your activity on xalendriosa isn't shared with ad networks or used to target you elsewhere online.
Changes to This Policy
We update this policy occasionally to reflect new features, legal requirements, or operational changes. Material changes will be announced through email and a prominent notice on the platform at least 30 days before taking effect.
The current version is always available at xalendriosa.com/privacy-policy, with the last updated date clearly shown. If you disagree with changes, you can close your account before they take effect. Continued use after the notice period means you accept the updated terms.
Privacy Questions?
We're here to answer any concerns about your data.
Email: support@xalendriosa.com
Post: xalendriosa Privacy Team
1A Haven Green, Ealing
London W5 2UU
United Kingdom
Phone: +44 191 270 2244
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you're concerned about how we handle your data.