Privacy Policy

We collect the following categories of information:

• Account information: Email address and password hash (PBKDF2) provided when you create an account.
• Payment information: Processed by Stripe. We store a Stripe customer ID and subscription status; we do not store your card number or billing details.
• Portfolio data: Ticker symbols you enter into the Portfolio Scanner. This data is used only to generate impact reports and is not retained beyond your session unless you save preferences.
• Usage data: Signals viewed, pages visited, and general interaction patterns. This is aggregate and anonymized where possible.
• Device and browser information: Collected automatically through standard server logs and analytics. May include IP address, browser type, and operating system.

Your information is used to:

• Deliver and maintain your account and subscription services
• Process billing and manage your subscription via Stripe
• Generate portfolio impact reports when you use the scanner
• Communicate service-related updates to your registered email address
• Detect and prevent unauthorized access or abuse of the Platform
• Improve Platform performance and user experience

We do not use your information to profile you for advertising, sell your data to third parties, or build predictive profiles for any purpose other than delivering the service you signed up for.

RexUnda shares your information only in the following circumstances:

• Stripe: For payment processing. Stripe's use of your payment data is governed by Stripe's own Privacy Policy.
• Service providers: Vendors who host our infrastructure (database, compute, CDN), operate our analytics, or send transactional emails — bound by confidentiality agreements.
• Legal obligations: When required by law, court order, or regulatory authority.

We do not sell your personal data to third parties. "Selling" does not include using service providers as described above.

We retain your data for the following periods:

• Account data: Retained while your account is active. Deleted within 90 days of account closure or deletion request.
• Billing records: Retained for a minimum of 7 years per financial record-keeping requirements.
• Portfolio inputs: Not persistently stored — used only during the active session to generate reports.
• Server logs: Retained for a maximum of 90 days, after which they are automatically deleted or anonymized.

RexUnda uses the following categories of cookies:

• Essential / session cookies: Required for authentication and service delivery. These are set when you log in and expire when you sign out. You cannot opt out of these without disabling service.
• Analytics cookies: Used to understand how visitors use the Platform (e.g., which pages are visited, how long sessions last). This data is aggregate and anonymized. You may be able to opt out via your browser settings.

We do not use third-party advertising cookies or tracking pixels that follow you across unrelated websites.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of all personal data we hold about you.
• Correction: Request that inaccurate or incomplete data be corrected.
• Deletion: Request that your personal data be deleted ("right to be forgotten"), subject to billing record retention requirements.
• Portability: Request your data in a structured, commonly used, machine-readable format.
• Objection: Object to certain processing activities, such as direct marketing.
• Restrict processing: Request limitation of processing in certain circumstances.

To exercise any of these rights, email rexunda@polsia.app with your request. We will respond within 30 days. You may also have the right to lodge a complaint with your local data protection authority.

We use industry-standard measures to protect your data, including TLS encryption in transit, bcrypt/PBKDF2 password hashing, access controls on our infrastructure, and regular security reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we are committed to maintaining appropriate technical and organizational safeguards.

In the event of a data breach that affects your personal data, we will notify you via the email associated with your account within 72 hours of our becoming aware of it, as required by applicable law.

The Platform is not directed at, or intended for use by, anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at rexunda@polsia.app and we will delete that data promptly.

For privacy-related questions, data access requests, or to report a concern:

rexunda@polsia.app