PRIVACY POLICY

Vector Ridge Ltd. ("Vector Ridge", "we", "us" or "our") respects your privacy rights and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our Website, subscribe to our trades, research or educational content, or interact with us in any way (collectively the "Services").

By using our Website or Services, you agree to the practices described in this Privacy Policy. We may update this policy from time to time — continued use after changes means you accept the new version.

1. Information We Collect

A. Information You Provide to Us

• Name, email address, phone number
• Billing address and payment details — we only ever see the last 4 digits of your card; full card data is handled by our payment processor
• Username, password, and account information
• Any information you voluntarily give us (e.g. when contacting support or filling forms)

B. Information Collected Automatically

• IP address, browser type, device information
• Pages visited, time spent, clicks, and interactions with our emails
• Non-precise location data (from IP address)
• Product-usage analytics while signed in — which models/tabs you open, session frequency and recency, watchlist size, and upgrade interactions — recorded to your account on the basis of our legitimate interest in improving the Services and prioritising support. First-party only; this does not place advertising or cross-site tracking identifiers on your device.

C. Information from Third Parties

We may receive information from payment processors, advertising partners, or your employer (if you have an institutional subscription).

2. How We Use Your Information

We use your personal information to:

• Provide, maintain and improve our Services (including sending signals and research)
• Process payments and manage your subscription
• Communicate with you (account updates, support, newsletters)
• Personalise your experience and send relevant offers
• Analyse usage and improve our Website
• Protect the security of our systems and prevent fraud
• Comply with legal obligations

3. Cookies and Tracking

We use cookies and similar technologies to run the Website, keep you signed in, remember your preferences, and understand how the site is used. They fall into two categories:

Strictly Necessary Cookies

Required for the Website and your account to function — for example login sessions, security, and remembering your cookie choice. These cannot be switched off.

Analytics Cookies

Help us measure traffic and improve the site. The providers we use are:

• Google Analytics 4 (measurement ID G-BNM14Z8SQ7) — measures page views and site usage. Google may set cookies and process data in the United States. See Google's Privacy Policy; you can also install the Google Analytics Opt-out Browser Add-on.
• Cloudflare Web Analytics — privacy-first, cookieless traffic measurement.

Your Cookie Choices

We use Google Consent Mode, so analytics cookies are denied by default. If you visit from the EU, EEA, UK or Switzerland, a cookie banner lets you Accept or Reject analytics cookies — nothing analytics-related runs until you accept. Visitors outside these regions have analytics enabled by default. You can change or withdraw your choice at any time by clearing this site's cookies / site data in your browser (the banner will reappear) or through your browser's cookie controls.

4. Sharing Your Information

We do not sell your personal information.

We may share it only with:

• Trusted service providers (processors) who are contractually required to protect your data and process it only on our instructions
• Affiliates or successors in the event of a merger, acquisition or sale of assets
• Legal authorities when required by law or to protect our rights

The main third-party processors we rely on are:

• Whop — payments and subscription management
• Supabase — account authentication and database
• Cloudflare — website hosting, security, and analytics
• Google Analytics — website usage analytics
• smtp2go — transactional and account emails
• FormSubmit — contact-form delivery

Your payment card details are handled directly by our payment processor — we never see or store full card numbers.

5. Data Storage and International Transfers

Vector Ridge Ltd. is incorporated in the Cayman Islands. The third-party providers listed above process data in various locations, including the United States. Where we transfer the personal data of EU/EEA, UK or Swiss users outside their home region, we rely on appropriate safeguards — such as the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework — so your data continues to receive GDPR-level protection.

6. Data Retention

We keep your information only as long as necessary to provide the Services, comply with law, or resolve disputes. When you cancel your subscription, we delete or anonymise your data within a reasonable time (subject to legal requirements).

7. Your Rights

You have the right to:

• Access, correct or delete your personal information
• Object to or restrict certain processing
• Withdraw consent (where applicable)
• Receive your data in a portable format

To exercise any of these rights, email support@vector-ridge.com. We will respond within 30 days.

8. GDPR — Your Rights Under EU/EEA/UK Law

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access — You may request a copy of the personal data we hold about you.
• Right to Rectification — You may request correction of inaccurate or incomplete data.
• Right to Erasure — You may request deletion of your personal data, subject to legal retention obligations.
• Right to Restrict Processing — You may request that we limit how we use your data.
• Right to Data Portability — You may request your data in a structured, machine-readable format.
• Right to Object — You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Our legal basis for processing your data includes: performance of a contract (providing our Services), legitimate interests (improving our Services, preventing fraud), compliance with legal obligations, and consent (where applicable, such as marketing emails).

To exercise any of these rights, contact us at support@vector-ridge.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. CCPA — Your Rights Under California Law

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with the following rights:

• Right to Know — You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete — You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct — You may request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing — You have the right to opt out of the sale or sharing of your personal information. Vector Ridge does not sell your personal information and has never sold personal information.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.

In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email, IP address), commercial information (subscription and transaction history), internet activity (browsing behaviour on our site), and geolocation data (non-precise, derived from IP address). This information is collected for the business purposes described in Section 2 of this policy.

We do not sell or share your personal information as defined under CCPA/CPRA. We do not use or disclose sensitive personal information for purposes other than those permitted under CCPA.

To submit a request, email support@vector-ridge.com with the subject line "CCPA Request." We will verify your identity and respond within 45 days. You may also designate an authorised agent to submit a request on your behalf.

10. Security

We use industry-standard technical and organisational measures to protect your data. However, no system is 100% secure — you use our Services at your own risk. Never share your password.

11. Children

Our Services are not intended for anyone under 18. We do not knowingly collect data from children.

12. Third-Party Links

Our Website may contain links to external sites. We are not responsible for their privacy practices.

13. Contact Us

For any questions about this Privacy Policy or your data, please contact us at support@vector-ridge.com.