Privacy Policy

1. Who we are

MarketGini (“we”, “us”, “our”) provides the MarketGini website and share research application (the “Service”). We are the controller of the personal data described in this policy, which is processed in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or your data, please use our contact form.

2. Information we collect

Information you give us

• Account details: your email address and password. We store your password only as a secure one-way hash, never in plain text.
• Subscription details: your plan and, when you subscribe to a paid plan, billing records. Card details are collected and stored by our payment provider, Stripe, and are never sent to or stored on our servers.
• Your content: the watchlists and shares you save, and the questions you ask Ask Gini.
• Messages: your name, email address, topic and message when you contact us.
• Reviews: if you write a review of MarketGini, your name, star rating and review, and whether we have asked you for a review or you have opted out of these requests.

Information collected automatically

• Usage data: the number of AI questions you ask each day (to apply your plan allowance), a record of each Ask Gini request with the amount of AI processing it used and its estimated cost (to monitor costs and prevent misuse — this record does not include your question), and a log of analyses and questions run on the Service.
• Technical data: your IP address, browser type and device information, and the date and time of requests. We use this for security, to prevent abuse (for example, rate limiting sign-in attempts and contact form submissions) and to fix problems.
• Activity and account-safety data: when you last used the Service and which days you used it (to understand how the Service is used), a one-way coded identifier derived from the network address you signed up from (so we can spot many accounts being created from one place to get around plan limits — your IP address itself is not stored with your account), a history of changes to your subscription, and a record of any action our team takes on your account (for example changing your plan, granting extra AI questions or suspending the account).

We do not use advertising trackers and we do not sell your personal data.

3. How we use it and why

4. Marketing, reviews and feedback

As a MarketGini customer, we may use your email address to send you promotions, marketing materials and news about MarketGini — such as new features, offers and plan updates — and to ask for your feedback and for reviews or testimonials of MarketGini. We only send these about our own service, and we never sell your email address or share it with others for their marketing.

You can opt out at any time. Every one of these emails includes a link to unsubscribe, and you can also turn off review requests in Manage account, or contact us. Opting out does not stop service emails we need to send you, such as account, security and billing notices.

If you write a review, we check it before deciding whether to publish it; publishing is at MarketGini’s discretion. A published review is shown on our website and may be used in our marketing with your initials only, your star rating and the date — never your full name or email address. You can ask us to change or remove your review at any time.

5. Ask Gini and AI processing

When you ask Ask Gini a question, your question, the recent conversation and relevant market data are sent to our AI provider, OpenAI, to generate an answer. Under its API terms, OpenAI does not use this data to train its models. Please do not include personal or sensitive information — about yourself or anyone else — in your questions.

Ask Gini does not make automated decisions that have legal or similarly significant effects on you.

6. Who we share it with

We share personal data only with trusted service providers who process it on our behalf, under contracts that require them to keep it secure and use it only as we instruct:

We request market data from third-party data providers (such as Yahoo Finance) using share tickers only; we do not send them your personal data. We may also disclose information if required by law, to protect our rights or users’ safety, or as part of a sale or reorganisation of our business (in which case this policy will continue to apply).

7. International transfers

Some of our providers are based in, or process data in, countries outside the UK, including the United States. When we transfer personal data outside the UK, we make sure it is protected by an adequacy decision (such as the UK Extension to the EU–US Data Privacy Framework) or by appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.

8. How long we keep it

• Account data and your content: for as long as your account is open. You can delete your account at any time from Manage account in the app (once any paid subscription has ended): your account, watchlists, AI usage counts and subscription history are deleted straight away (records of AI processing costs and of subscription changes are kept only in anonymised form that can no longer be linked to you), and we ask Stripe to delete the card and billing details saved for you. If you ask us to close your account instead, we delete it within 30 days. In both cases we keep only what we must keep by law, such as billing records.
• Sign-ups that are never verified: if the email address is not confirmed within 7 days, the account is deleted automatically.
• Daily AI usage counts, AI request cost records and activity days: up to 12 months.
• Logs of analyses and questions run on the Service: up to 35 days.
• Records of actions our team takes on accounts: up to 12 months, including after an account is deleted (to keep a reliable record of how accounts were managed).
• Contact messages: up to 24 months after our last correspondence.
• Reviews: unpublished reviews until we decide whether to publish them, or until your account is deleted; published reviews for as long as we show them. If you delete your account, an unpublished review is deleted and a published review is kept with your initials only, no longer linked to you. Your opt-out from review requests is kept for as long as your account is open.
• Billing records: six years, to meet tax and accounting requirements.
• Security logs: up to 90 days, unless needed to investigate an incident.

9. Cookies and local storage

We use only what is strictly necessary to run the Service, so we do not ask for cookie consent:

• Session cookie: keeps you signed in and protects your account. It expires when you sign out or close your browser session.
• Local storage: remembers your preferences on your device, such as light or dark theme, your selected market and your active watchlist. This information is not sent to us.
• Bot protection: if our sign-up or contact forms use Cloudflare Turnstile, Cloudflare may process technical information about your browser to tell humans and bots apart. It is used only for this security purpose.

We do not use analytics, advertising or social media tracking cookies. If this changes, we will update this policy and ask for your consent first.

10. Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, access controls and rate limiting. No online service can be completely secure, so please use a strong, unique password and keep it safe.

11. Your rights

Under UK data protection law, you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data;
• ask us to restrict how we use your data;
• object to processing based on our legitimate interests;
• receive your data in a portable format (data portability); and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, send us a message through our contact form (topic “Privacy & data request”) using the email address linked to your account. We will respond within one month. There is usually no charge. To delete your account and data yourself, use Delete account on the Manage account page.

12. Children

The Service is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us their data, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. We will show the effective date at the top of this page and, if the changes are significant, let you know by email or in the app.

14. Contact and complaints

If you have a question or concern about how we handle your data, please contact us first through our contact form, and we will do our best to help.

You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.