Privacy Policy

Version 2026-07-01 · Last updated 1 July 2026

This policy explains what personal data VINEROX collects, why, and your rights. VINEROX is the data controller and is incorporated in Israel. We aim to comply with the EU GDPR, the California CCPA/CPRA, and the Israeli Protection of Privacy Law.

1. Data we collect

• Account data: username, email address, hashed password, and your affirmation that you are 18+.
• Usage & telemetry: pages viewed, session activity, device/browser information, IP address, and in-app actions — used to run, secure, and improve the service.
• Consent records: the version of the legal documents you accepted, with timestamp and IP, kept for compliance.
• Payment metadata: subscription status and billing references. Card details are handled directly by our payment provider — we do not store full card numbers.

We collect only email and a self-declared age. We do not perform full identity (KYC) verification.

2. How we use it

• To provide the research content, signals, and subscriptions.
• To secure accounts and prevent fraud and abuse.
• To process payments and manage subscriptions.
• To analyze and improve the product (aggregated/behavioural analytics).
• To comply with legal obligations and enforce our Terms.

3. Legal bases (GDPR)

We rely on: performance of our contract with you (providing the service); your consent (where required, e.g. certain analytics); our legitimate interests (security, product improvement); and compliance with legal obligations.

4. Sharing

We share data only with service providers acting on our behalf — hosting, payment processing (e.g. Stripe), and market-data providers (e.g. Yahoo Finance) — under appropriate safeguards, and where required by law. We do not sell your personal data.

5. International transfers

As a global service, your data may be processed in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

6. Retention

We keep personal data for as long as your account is active and as needed for legal, accounting, or security purposes, after which it is deleted or anonymized.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your data, to object to or restrict certain processing, and to withdraw consent. California residents may exercise CCPA/CPRA rights, including the right to know and delete, and to opt out of "sale"/"sharing" (we do not sell). To exercise any right, contact us below.

8. Security

We use industry-standard measures including password hashing, encrypted transport, and access controls. No system is perfectly secure; you use the service at your own risk.

9. Children

The service is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will remove the account.

10. Changes & contact

We may update this policy; material changes bump the version. For privacy requests or questions, contact privacy@vinerox.com.