Privacy Policy
Last updated: April 2026 — GDPR Article 13/14 Notice
1. Data Controller
The data controller for personal data processed through the OwlTradeZone platform is the administrator of OwlTradeZone, contactable at admin@owlzone.trade.
2. Data We Collect
We collect and process the following categories of personal data:
- Account data — name, email address, account creation date, and authentication credentials (managed via Clerk; we receive only your name and email).
- Membership data — membership status, pricing tier, profit-share percentage, associated broker name.
- Trading data — trades you log on the platform, including entry price, position size, profit/loss, and broker screenshots you upload.
- Payment data — monthly fee calculations, payment amounts, and payment dates. We do not store card numbers; payments are processed via Stripe.
- Technical data — login timestamps, session data, and platform usage activity.
3. Legal Basis for Processing
| Purpose | Legal Basis |
|---|---|
| Delivering trading signals and operating the member portal | Art. 6(1)(b) — performance of contract |
| Calculating and collecting monthly fees | Art. 6(1)(b) — performance of contract |
| Verifying trade screenshots | Art. 6(1)(b) — performance of contract |
| Maintaining billing records for legal/tax compliance | Art. 6(1)(c) — legal obligation |
| Platform security and fraud prevention | Art. 6(1)(f) — legitimate interests |
4. Data Retention
We retain personal data for the following periods:
- Account and membership data — for the duration of membership, then deleted within 90 days of cancellation.
- Billing records and payment history — 3 years after membership ends (Irish tax and accounting requirements).
- Trade logs and screenshots — 3 years after the relevant billing period closes.
- Login and session logs — 12 months.
5. Third-Party Processors
We share personal data with the following processors:
- Clerk (US) — authentication and user management. Data transfer governed by Standard Contractual Clauses (SCC).
- Stripe (US) — payment processing. Data transfer governed by SCC. Stripe is independently PCI DSS compliant.
- Supabase (EU) — database hosting. Data stored in the EU (Frankfurt). Supabase is SOC 2 Type II certified.
We do not sell your personal data to any third party.
6. Your Rights (GDPR)
Under the General Data Protection Regulation (EU) 2016/679 and the Data Protection Acts 1988–2018 (Ireland), you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion of your data (subject to retention obligations).
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Restriction — request that we restrict processing of your data.
To exercise any of these rights, contact us at admin@owlzone.trade. We will respond within 30 days.
7. Supervisory Authority
If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at dataprotection.ie, or with the supervisory authority in your country of residence.
8. Changes to This Policy
We will notify active members by email of any material changes to this Privacy Policy at least 14 days before the changes take effect.