Privacy Policy

Last updated: October 7, 2026

IndexNexa ("we", "our", or "us") respects your privacy and is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR).

1. Data Controller

Controller: Artur Safaryan
Location: Estonia
Contact Email: indexnexa@gmail.com (or via the Support widget on the website)

2. Information We Collect & How It Is Used

We collect only the personal data necessary to run the service. Specifically:

Account email & authentication: sign-up and sign-in are handled by Supabase Auth. We use your email to manage your account, your preferences (timezone, watchlist), and your subscription tier. Passwords are hashed by the auth provider — we never see or store them.
Newsletter subscription: if you join the newsletter, your email address is stored in our subscribers list and used to send market briefings and the welcome offer (code NEXA15 — 15% off the first 2 months of Pro). You can unsubscribe at any time; every email includes an opt-out.
Support requests: messages you send through the Support widget, together with the email address you provide, are stored as support tickets and used only to answer you.
Subscription & payment processing: Pro subscriptions are processed via Stripe. Stripe handles all card and payment details; IndexNexa never sees or stores your card number. We receive from Stripe only the facts needed to activate your subscription (payment status, plan, billing email).
Market data requests: quotes, charts, and headlines are fetched server-side from public market data providers (currently Yahoo Finance, with Alpha Vantage as a backup feed) and cached on our servers. These requests do not carry your personal data.
Local storage: we store small preference items in your browser's localStorage: your timezone, your cookie choice, whether you have seen the welcome screen, and your sign-in session token. These stay on your device.
Cookies & analytics: we run no advertising or tracking cookies. No third-party analytics are used at present. If we ever add analytics, we will ask for your consent first.

3. Third-Party Processors

To deliver the service we rely on these processors, each of which processes data only to perform its function:

Supabase — authentication, account data and preferences (Row-Level Security enforced)
Stripe — payments and subscription billing
Vercel — hosting and delivery of the website
Yahoo Finance / Alpha Vantage — public market data (no personal data shared)

4. Legal Basis

We process account data to perform the service you signed up for (contract), newsletter data on your consent (which you may withdraw anytime), and support tickets to answer your requests. We do not profile you or sell data — ever.

5. GDPR Rights

Under the GDPR you have the following rights regarding your personal data:

Access: request what personal data we hold about you and receive a copy.
Rectification: request correction of inaccurate or incomplete information.
Erasure ("right to be forgotten"): request deletion of your account and associated data.
Portability: receive your personal data in a structured, machine-readable format.
Objection & restriction: object to or restrict certain processing.
Withdraw consent: unsubscribe from the newsletter at any time.

To exercise any of these rights, email indexnexa@gmail.com or use the Support widget on the website. We will respond within 30 days.

6. Retention

Account and preference data is kept while your account is active. Newsletter addresses are kept until you unsubscribe. Support tickets are kept for up to 12 months after resolution. When data is no longer needed, it is deleted.

7. Changes to This Policy

If we change this policy, we will update the date at the top of this page. For significant changes affecting your rights, we will notify you directly (for example, by email or in-app notice).