Legal
Privacy policy
Last updated — 11 July 2026
1. Who we are
This policy explains how Witan Way Ltd (Witan Way, we, us), the data controller, handles personal data for the Lab, The Way, and the Charter. Witan Way Ltd is incorporated in Mauritius. For any privacy question, or to exercise your rights, write to privacy@witanway.com.
2. What we collect
We collect only what the service needs: your email address, for sign-in, for the Charter, and for the weekly update on the strategies you have activated; your billing details, which are handled end-to-end by Stripe and never stored by us; the strategy versions, activations, and preferences you save in the Lab; and minimal technical data, such as error reports and aggregate usage, with your IP address redacted.
3. What we never collect
We never collect brokerage credentials, account numbers, or holdings of any kind. We do not run advertising trackers, we do not build advertising profiles of you, and we do not sell, rent, or trade your data.
4. Why we process it, and our lawful bases
We process your account and billing data to provide the membership you asked for, which is performance of a contract. We process minimal technical data to keep the service secure and working, which is our legitimate interest. We send the free Charter and other marketing messages only with your consent, which you can withdraw at any time by unsubscribing.
5. Who we share it with
We use a small set of processors, each receiving only the data its function needs: Stripe for payments, Supabase for accounts and the database, Resend for email, Sentry and PostHog for error and usage monitoring with IP redaction, and Vercel and Railway for hosting. Market data comes from EODHD and contains no personal data. Some of these providers operate outside your country; where personal data is transferred internationally, we rely on appropriate safeguards.
6. How long we keep it
We keep your account data for as long as you are a member and for as long as we are required to. When you delete data or close your account, active records are removed promptly and residual copies rotate out of backups within thirty days.
7. Your rights
You may ask us to access, correct, export, or delete your personal data, and to restrict or object to certain processing; where processing is based on consent, you may withdraw it. You also have the right to complain to a data-protection supervisory authority. To exercise any of these, email privacy@witanway.com.
8. Cookies
We use only the cookies the service needs to work — for sign-in sessions and to remember your language. We do not use advertising cookies. Usage monitoring is IP-redacted and does not follow you across other websites.
9. Children
The service is intended for adults and is not directed at anyone under 18. We do not knowingly collect data from children.
10. Changes and contact
We may update this policy and will change the 'last updated' date above when we do. For anything concerning your data, contact privacy@witanway.com.