Privacy Policy

This policy explains what personal data we collect, why, and your rights. The data controller is Elias de Sena, trading as Vektor, Bützenstrasse 17, 8185 Winkel, Switzerland, desk@vektoralgo.com. We process personal data under the Swiss Federal Act on Data Protection (revFADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. What we collect

• Contact and account data: your email address and first name.
• Product data: the TradingView username you give us so we can grant access.
• Payment data: your payment is processed by Stripe. We do not receive or store your full card number. We keep a record of the transaction (amount, currency, status, and a payment reference).
• Quiz and marketing data: if you took the former on-site quiz (retired July 2026), the answers you chose and the resulting profile, plus which page or ad brought you.
• Technical and usage data: IP address, browser and device information, approximate location, pages viewed, referrer, and marketing identifiers (such as UTM tags and a click ID) used to measure and attribute advertising.

2. Why we use it and our legal basis

• To deliver the product and support you (grant access, take payment, answer messages, honour refunds). Basis: performance of a contract.
• To send transactional emails (receipts, access, onboarding). Basis: contract.
• To send marketing emails if you gave us your email through a lead form (or the former quiz), or as an existing customer. Basis: consent or our legitimate interest in direct marketing. You can unsubscribe from any marketing email with one click.
• To measure and run advertising (including the Meta pixel and its server-side Conversions API). Basis: your consent if you are in the EEA, the UK or Switzerland — we ask before anything loads, nothing runs until you allow it, and you can withdraw at any time using the “Cookie choices” control at the bottom of this page (it is also in our site footer). Elsewhere, our legitimate interest in understanding and improving our marketing; an explicit decline is always honoured, and the same link lets you record one.
• To keep the service secure and prevent fraud and abuse. Basis: legitimate interest.
• To meet legal and tax obligations (keeping invoicing and accounting records). Basis: legal obligation.

3. Who we share it with (processors)

We use trusted providers to run the service. They process data on our behalf under contract:

• Stripe: payment processing.
• Supabase: database hosting for leads, purchases, and email records.
• Resend: sending our transactional and marketing emails.
• Vercel: website hosting and content delivery.
• Meta Platforms: advertising measurement (pixel, and the Conversions API where enabled). Data shared for matching is hashed where the tool supports it.
• TradingView: we use the TradingView username you provide to grant script access on their platform.
• OpenRouter: routes your support-chat messages to an AI model provider (such as OpenAI) so the assistant can reply, and processes the content of those messages. This involves a transfer to the United States.
• Cloudflare: bot and spam protection on our forms; where enabled it receives your visitor IP address.

We do not sell your personal data.

4. International transfers

Some providers are based outside Switzerland and the EU, including in the United States. These US processors include Stripe, Vercel, Meta, Cloudflare, and OpenRouter (together with the AI model provider it routes support-chat messages to, such as OpenAI). Where data is transferred internationally, we rely on appropriate safeguards such as adequacy decisions or the European Commission's Standard Contractual Clauses.

5. Cookies and similar technologies

We use a small number of cookies and browser storage items:

• Essential: to run checkout, remember an in-progress order, keep your on-site experience consistent, and secure the site. This includes a cookie recording your advertising choice below, kept for up to a year so we do not have to ask again, and a cookie recording whether your region requires us to ask.
• Advertising and analytics: the Meta pixel and related identifiers, to measure ads and conversions. If you are in the EEA, the UK or Switzerland we ask for your consent with a banner before any of it loads, and nothing runs until you allow it. Elsewhere these run on the basis of our legitimate interest in measuring our advertising. Either way you can change your answer at any time with the “Cookie choices” control at the bottom of this page, or the same link in our site footer, and you can opt out as described below.
• Payment: Stripe sets cookies on the checkout to prevent fraud.

The “Cookie choices” control at the bottom of this page, and in our site footer, is the direct route: it clears your stored answer and asks again, and a decline recorded there applies to the server-side measurement as well as the browser pixel. You can also control or block cookies through your browser settings, and limit ad personalisation in your Meta account's ad preferences. Please note that browser cookie settings alone do not stop everything: some advertising measurement runs server-side, sent from your request (such as your IP address and browser details) through Meta's Conversions API, so blocking the browser pixel or clearing cookies does not by itself switch it off — declining does. You can also email desk@vektoralgo.com to object and we will act on it. Blocking some cookies may affect how the site works.

6. How long we keep it

We keep account and purchase records for as long as needed to provide the product and to meet legal retention periods (tax and accounting records are generally kept for up to ten years). Marketing contacts are kept until you unsubscribe or ask us to delete them. Lead and quiz data is kept while we still have a use for it and until you ask us to delete it; we do not currently run an automatic purge, so if you want it removed, email us and we will delete it.

7. Your rights

Subject to law, you can ask us to:

• access the personal data we hold about you, and get a copy;
• correct data that is wrong or incomplete;
• delete your data;
• restrict or object to certain processing, including direct marketing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing already done.

To exercise any right, email desk@vektoralgo.com. Withdrawing your advertising consent does not need an email: the “Cookie choices” control at the bottom of this page clears your answer and asks again, so withdrawing is as easy as giving it. You also have the right to complain to a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, your local data protection authority.

8. Security

We take reasonable technical and organisational measures to protect your data, including access controls that keep purchase records readable and writable only by our server, never by the website in your browser. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

Vektor is for adults. It is not directed at anyone under 18, and we do not knowingly collect their data.

10. Changes

We may update this policy. The current version is the one published here, dated above. Material changes will update that date.

11. Contact

Elias de Sena, trading as Vektor. Bützenstrasse 17, 8185 Winkel, Switzerland. Email desk@vektoralgo.com.