Privacy Policy

When you create an account we collect your email address, name, and (for email/password accounts) a securely hashed password using the argon2id algorithm (your plain-text password is never stored).

Lawful basis: Performance of a contract (providing you access to the Service you signed up for (UK GDPR Article 6(1)(b))).

If you choose “Continue with Google”, Google shares your email address, name, and profile picture with us. We do not receive your Google password. You can revoke this access at any time via your Google account permissions.

Lawful basis: Performance of a contract (UK GDPR Article 6(1)(b)).

To keep you securely signed in, we store a session record in our database containing: a session token, your IP address at login time, your browser user-agent string, and the session expiry timestamp. Sessions expire after 30 days of inactivity and are automatically deleted.

Lawful basis: Legitimate interests (securing your account and preventing unauthorised access, UK GDPR Article 6(1)(f)).

We remember your last-viewed stock ticker and preferred time-range setting (1, 3, or 5 years) using cookies described in Section 3 below. These are used solely to restore your view when you return to the dashboard.

Lawful basis: Consent (UK GDPR Article 6(1)(a)), collected via the cookie consent banner.

We store your subscription tier (“free” or “pro”) in our database. When Stripe payment processing is introduced, Stripe will process payment card data directly; we will never store raw card numbers. A separate Stripe privacy notice will be added at that time.

The Service Parties reserve the right to amend, update, or replace this Privacy Policy at any time and at their sole discretion. Reasons for amendment include, but are not limited to:

• Changes in applicable law or regulation, including the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), or any successor or amending legislation;
• Guidance, rulings, or enforcement decisions issued by the Information Commissioner’s Office (ICO) or any competent supervisory authority;
• The introduction of new cookies, tracking technologies, or similar tools, for example to improve the performance, security, or personalisation of the Service;
• The addition of new features, functionality, or services to the platform;
• Changes to our third-party processors, sub-processors, or data-sharing arrangements;
• Security improvements or changes to our data retention practices; or
• Any other operational, commercial, or legal reason we consider appropriate.

The current version of this Policy is always available at beat-index.com/privacy. We recommend that you review it periodically.

We distinguish between material changes and minor changes:

• Material changes are those that significantly affect your rights as a data subject, alter the legal basis on which we process your personal data, change the categories of personal data we collect, introduce new third-party processors, or materially affect how we use or share your information.
• Minor changes include typographical corrections, clarifications that do not alter the substance of the Policy, updates to our contact details, introduction of functional cookies of the same category as those already listed, or other changes that do not materially affect your rights.

Material changes: we will notify registered users by email to the address held on your account at least 14 days before the amended Policy takes effect. We will also display a prominent notice on the Service during that notice period. The email will summarise the key changes and provide a link to the full updated Policy.

Minor changes: we will update the “Last updated” date at the top of this page. No proactive email notification will be sent for minor changes.

If you do not have a registered account (for example, if you are a visitor who has not signed up), you will not receive email notification. We therefore recommend bookmarking this page and checking it periodically, particularly before making use of any new features.

Your continued use of the Service after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept a material change, you must cease using the Service before the effective date of that change. You may close your account at any time by contacting us at privacy@beat-index.com; we will delete your personal data in accordance with Section 5 of this Policy.

If any provision of this Privacy Policy is held by a court of competent jurisdiction to be invalid, illegal, or unenforceable in whole or in part, it shall be deemed modified to the minimum extent necessary to make it valid, legal, and enforceable. If such modification is not possible, the relevant provision shall be deemed deleted. Any such invalidity, illegality, or unenforceability shall not affect the remaining provisions of this Policy, which shall continue in full force and effect.

No failure or delay by us in exercising any right or remedy provided under this Policy or by law shall constitute a waiver of that or any other right or remedy, nor shall it prevent or restrict any further exercise of that right or remedy.

This Privacy Policy, together with our Terms of Service, constitutes the entire agreement between you and the Service Parties with respect to the processing of your personal data in connection with the Service, and supersedes all prior agreements, representations, and understandings relating to that subject matter.

You may not assign or transfer any of your rights or obligations under this Policy. We may assign or transfer our rights and obligations under this Policy in connection with a merger, acquisition, reorganisation, or sale of all or substantially all of our assets, provided that the transferee agrees to be bound by an equivalent data protection policy. We will notify you of any such transfer by updating this page.