Privacy Policy

1. Introduction

Define Infinity ("we," "us," or "our") operates Stocker™ (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Username
• Password (encrypted)
• Profile preferences and settings

2.2 Usage Data

We automatically collect information about how you interact with our Service:

• Watchlists and ticker views
• Feature interactions and clicks
• Session duration and frequency
• Search queries within the platform

2.3 Technical Data

• IP address and location data
• Browser type and version
• Device information and operating system
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve the Service
• Personalization: To customize your experience and provide relevant content
• Communication: To send product updates, beta invitations, and important notices
• Analytics: To analyze usage patterns and optimize features
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with legal obligations and enforce our Terms

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

• Consent: You have given explicit consent (e.g., marketing emails)
• Contract: Processing is necessary to fulfill our service agreement
• Legitimate Interests: For analytics, security, and service improvement
• Legal Obligation: To comply with applicable laws

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party vendors (hosting, analytics, email) under strict data processing agreements
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, you can contact our DPO or email privacy@defineinfinity.com.

7. Data Retention

We retain your personal data only as long as necessary to provide the Service or comply with legal obligations. Inactive accounts may be deleted after 24 months of inactivity. You may request earlier deletion by contacting us.

8. Security Measures

We implement industry-standard security measures to protect your data:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure server infrastructure and access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection practices

However, no system is 100% secure. We cannot guarantee absolute security of your data.

9. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for basic functionality (authentication, preferences)
• Analytics Cookies: To understand usage patterns (can be disabled)
• Marketing Cookies: For targeted communications (requires consent)

You can manage cookie preferences through your browser settings.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure adequate safeguards through Standard Contractual Clauses (SCCs) approved by the European Commission.

11. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect data from children. If you believe we have collected data from a minor, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on our Service. Continued use after changes constitutes acceptance.

13. Contact Information