Legal
Privacy policy
Last updated — 19 August 2026
1. Who we are
Witan Way is responsible for determining the purposes and means of the processing of personal data through the Service. For any privacy or data protection matter, you may contact us at privacy@witanway.com. Further information regarding the legal identity of the controller may be obtained through this contact.
2. What we collect
We collect only what the service needs: your email address, for sign-in, for the Charter, and for the weekly update on the strategies you follow; your billing details, which are handled end to end by FastSpring and never stored by us; the strategy versions, follows, and preferences you save in the Lab; and minimal technical data, such as error reports and aggregate usage, with your IP address masked.
3. What we never collect
We never collect brokerage credentials, account numbers, or holdings of any kind. We do not run advertising trackers, we do not build advertising profiles of you, and we do not sell, rent, or trade your data.
4. Why we process it, and our lawful bases
We process your account and billing data to provide the membership you asked for, which is performance of a contract. We process minimal technical data to keep the service secure and working, which is our legitimate interest. We send the free Charter and other marketing messages only with your consent, which you can withdraw at any time by unsubscribing.
5. Who we share it with
We use a small set of processors, each receiving only the data its function needs: FastSpring, Merchant of Record for the transaction, for payments and invoicing, Supabase for accounts and the database, Resend for email, Sentry for error monitoring, and Vercel and Railway for hosting. Usage measurement is handled by us alone and shared with no one. Market data comes from EODHD and contains no personal data. Some of these providers operate outside your country; where personal data is transferred internationally, we rely on appropriate safeguards.
6. How long we keep it
We keep your account data for as long as you are a member and for as long as we are required to. When you delete data or close your account, active records are removed promptly and residual copies rotate out of backups within thirty days.
7. Your rights
You may ask us to access, correct, export, or delete your personal data, and to restrict or object to certain processing; where processing is based on consent, you may withdraw it. You also have the right to complain to a data-protection supervisory authority. To exercise any of these, email privacy@witanway.com.
8. Cookies
We use the cookies the service needs to work — for sign-in sessions and to remember your language — plus one first-party identifier that lets us count visits and understand which pages are read. We do not use advertising cookies. Usage measurement stays with us: no IP address is stored, nothing is shared with a third party, you are not followed across other websites, and the underlying records are deleted after thirteen months.
9. Children
The service is intended for adults and is not directed at anyone under 18. We do not knowingly collect data from children.
10. Changes and contact
We may update this policy and will change the 'last updated' date above when we do. For anything concerning your data, contact privacy@witanway.com.