Legal
Privacy Policy
In force from: 09/10/2026
This explains what personal data we collect, why, and what you can do about it. It is written to be read, not to be survived.
1. Who is responsible
The data controller is:
Frassetto Giacomo
Registered address: Via Confalonieri 9 Monza
VAT number: __________________________
Contact: bot-marketplace@bot-marketplace.com
2. What we collect
- Your email address, when you create an account. It is also where alerts go if you choose email delivery.
- Your Telegram chat identifier, only if you connect Telegram. It is a number that lets us send you a message; it is not your phone number, and we never see your contacts.
- Your settings — the companies, pairs, event types and strategies you have chosen, and where alerts should go.
- Billing records — what you bought, when, for how much, and the invoice. Tax law requires us to keep these.
- Screenshots you upload to Portfolio Tracker, for as long as it takes to read the positions out of them.
- Questions you ask AI Analyst, and its answers.
- Technical logs — IP address, time, and what was requested — kept briefly for security and for working out why something broke.
We do not collect your name, your address or your phone number unless tax law requires it on an invoice, and we never ask for exchange or broker credentials, API keys, or anything that could reach your money.
3. Why, and on what legal basis
- To provide the service you paid for — performance of a contract (Art. 6(1)(b) GDPR). Email, Telegram identifier, settings.
- To bill you and keep accounts — legal obligation (Art. 6(1)(c)). Billing records.
- To keep the service working and secure — legitimate interest (Art. 6(1)(f)). Technical logs, kept short.
- To answer you when you write — performance of a contract, or legitimate interest if you are not yet a customer.
We do not sell personal data, we do not share it for advertising, and we do not profile you to decide anything about you automatically.
4. What we deliberately don’t do
This section exists because it is a choice, not an accident.
- No tracking pixels in our emails. We do not know whether you opened an alert, when, or on what device.
- No redirect links. A link to a filing on sec.gov goes to sec.gov. It does not pass through a counter of ours first.
- No advertising trackers on the site, and no data handed to an advertising network.
A service whose whole promise is “check it yourself” has no business watching who checks.
5. Who else sees it
We use a small number of suppliers, each for one job, each bound by a data processing agreement:
- Stripe — payments. Your card details go to Stripe directly and never reach us.
- Resend — sending email. It handles your email address in order to deliver the message.
- Telegram — delivering alerts to your chat, if you connect it.
- DigitalOcean — the server that sends the alerts and runs the AI, located in the United States (New York).
- Hostinger — the website and its database.
- Anthropic — the language model that writes the plain-English explanations, answers AI Analyst questions, reads the screenshots you upload to the Portfolio Tracker, and drafts replies to support emails that a person then reads and sends. It receives that content, not your account details, and it is not used to train models.
Some of these are established outside the European Economic Area. Where that is the case, transfers are covered by the European Commission’s standard contractual clauses or an equivalent mechanism.
6. How long we keep it
- Account and settings — while your account exists. Delete the account and they go.
- Portfolio screenshots — deleted once the positions have been read out of them. We keep the numbers you confirmed, not the picture.
- AI Analyst questions — not kept on our servers. Your conversations stay in your own browser (see section 8); we keep only a monthly count of how many questions you asked.
- Technical logs — 30 days.
- Billing records — ten years, because Italian tax law says so. This is the one thing we cannot delete on request.
7. Your rights
Under the GDPR you may ask us to: show you the data we hold about you; correct it; delete it; restrict or object to how we use it; or give it to you in a portable format. You may also withdraw consent where we relied on it, without affecting what came before.
Write to bot-marketplace@bot-marketplace.com and we will answer within 30 days. There is no form and no fee.
If you think we have handled your data badly, you may complain to your national data protection authority. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it). We would rather you told us first, but it is your right either way.
8. Cookies
We use the cookies needed to keep you signed in, to remember what is in your basket, and to keep the checkout secure. These are strictly necessary and do not require consent.
Your AI Analyst conversations are saved only in your own browser, so you can reopen them from the menu. They are not stored on our servers, and we cannot read them. You can delete one, or all of them, from the same menu; clearing your browser data removes them too. To answer a question we send that question, and the previous messages of the same conversation, to the AI that writes the reply, and we keep nothing of it once the reply is sent.
We do not use advertising or profiling cookies. If that ever changes, you will be asked first, with a real choice and a refusal that is as easy as acceptance.
9. Changes
If this policy changes materially we will tell the people it affects. The date at the top always shows the version in force.