Privacy policy

1. Data controller

Hedgen Ltd (a private limited company, Companies House no. 16838911), whose registered office is at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom, is the controller of the processing activities described below. For any query relating to personal data: contact@hedgen.xyz.

2. Data collected

BASIS collects only the data necessary to provide the service: your email address; the telegram_chat_id when you link Telegram; and the stripe_customer_id associated with billing. The account and alert settings you create are also retained in order to deliver the features you request.

3. Purposes

• create, authenticate and administer the account;
• configure and send the requested alerts;
• manage the subscription, payments and billing;
• secure and operate the service.

Personal data is not sold and is not used for advertising profiling.

4. Legal bases

Processing necessary for the account, alerts and subscription relies on the performance of the contract or pre-contractual measures. Security and abuse prevention rely on Hedgen's legitimate interest. Accounting and tax obligations rely on applicable legal obligations.

5. Recipients & processors

Data is accessible only to authorised personnel at Hedgen and to the processors required for hosting, authentication, alert delivery and billing, in particular Vercel, Supabase, Telegram and Stripe depending on the features used. These processors handle the data within the scope of their services and applicable contractual safeguards.

6. Analytics and cookies

Audience measurement is cookieless and sets no analytics cookies. No cookie consent banner is therefore displayed. Should this change, this policy and, where the law requires it, the consent mechanism will be updated before activation.

7. Retention & account deletion

Data is retained for as long as necessary for the purposes described and for legal obligations. A request to delete the account triggers cancellation of the Stripe subscription under its terms and the cascading deletion, within thirty days, of authentication data and the associated local data: subscription, alert rules, Telegram link and API keys. Certain billing records may be retained by Stripe or Hedgen for the period required by law.

8. Your rights

Subject to applicable law, you may request access to, rectification, erasure, restriction or portability of your data, and object to processing based on legitimate interest. You may exercise your rights at contact@hedgen.xyz. Hedgen Ltd's lead supervisory authority is the Information Commissioner's Office (ICO, United Kingdom); any user residing in the European Union retains the right to lodge a complaint with the data protection authority of their country of residence (in France, the CNIL).

9. Security & changes

Hedgen applies technical and organisational measures proportionate to protecting the data. This policy may evolve alongside the service or the legal framework; its update date appears at the top of the page.