1. Who is responsible
The controller of your personal data is Maksim Shashkov, an individual resident in Cyprus who operates InsiderGauge. Contact: support@insidergauge.com.
2. What we collect and why
- Account data: your email address, account identifier and sign-in times. Used to create your account, sign you in and contact you about the service. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
- Alert settings: the filters you choose (minimum value, role, ticker list, clusters) and, if you link Telegram, your Telegram chat ID, plus a record of which alerts we sent you so none is sent twice. Used to deliver the alerts you asked for. Legal basis: contract (Art. 6(1)(b)).
- Technical data: IP address, browser details and request logs kept by our hosting and authentication providers, and error reports with credentials removed. Used to run, secure and debug the service and to prevent abuse. Legal basis: our legitimate interest in a secure, working service (Art. 6(1)(f)).
- Usage analytics, only if you accept analytics cookies: the pages you open, what you click, the features you use and recordings of your sessions with everything you type masked, linked to your account identifier (never your email) when you are signed in. Used to understand how the service is used and improve it. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time with the Cookie settings link on every page.
An email address is required to hold an account; without it we cannot provide the service. Linking Telegram is optional and needed only for alerts.
We never ask for your portfolio, holdings, finances or investment goals. We do not sell your data, show ads or use your data for marketing profiles.
3. Who processes it for us
- Supabase (database and sign-in), data stored in the EU (Ireland);
- Vercel (website hosting), server functions run in the EU (Ireland);
- Cloudflare (Turnstile bot check on the sign-in and sign-up form, and forwarding of mail sent to our contact address);
- Resend (delivery of sign-in code emails), data processed in the EU;
- Google (Gmail), the inbox that receives mail sent to our contact address; Google handles that mail under its own terms;
- Sentry (error monitoring), data stored in the EU (Germany);
- PostHog (usage analytics, only with your consent), data stored in the EU;
- Telegram, only if you link the bot; Telegram handles your messages under its own privacy policy.
Some of these providers are based in the United States or may access data from there. Such transfers rely on the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses in the providers' data processing terms.
4. Data about company insiders
InsiderGauge republishes Form 4 filings that company insiders (directors, officers and major shareholders) must file with the U.S. Securities and Exchange Commission. If you are named in such a filing, we did not collect your data from you, and this section is the notice we owe you under GDPR Art. 14. Writing to every insider individually would take disproportionate effort, so we publish this notice instead (Art. 14(5)(b)).
- Source: public filings on SEC EDGAR (sec.gov).
- Data: your name, SEC identifier (CIK), role at the company, and the trades and footnotes as filed.
- Purpose and legal basis: republishing public regulatory data so that users can follow insider trading. Legal basis: our legitimate interest, and the public's, in the transparency of securities markets (Art. 6(1)(f)).
- Recipients: everyone who uses the service; Supabase (database), Vercel (website hosting) and Cloudflare (R2 storage of filing history) process it for us.
- Retention: kept indefinitely as part of the published filing history, which mirrors the permanent public SEC record.
- Your rights: you may ask for access, correction of anything we reproduced wrongly, or object to the processing (Art. 21) by writing to support@insidergauge.com. We assess every objection individually. Because these filings are a mandatory public record that the SEC itself publishes, we will usually have compelling legitimate grounds to keep showing them, and we will explain our decision in writing. You may also complain to a supervisory authority as described in section 6.
5. How long we keep it
We keep account data and alert settings until you ask us to delete your account. Deleting your account removes your alert settings, Telegram link and alert history. Unlinking Telegram in the alert settings removes your chat ID at once. Analytics data is kept in PostHog for up to one year. Provider logs and error reports are kept for the providers' standard retention periods.
6. Your rights
You may ask for access to, correction, deletion or a portable copy of your data, and you may object to or ask us to restrict its processing. Write to support@insidergauge.com; we reply within one month. You may also complain to the Commissioner for Personal Data Protection in Cyprus or to the supervisory authority where you live.
7. Age
The service is for people aged 18 or over. We do not knowingly collect data about children.
8. Cookies
We use cookies and browser storage that the site needs to work and, only with your consent, analytics cookies. See the Cookie Notice.
9. Changes
We will post any update here with a new version and effective date, and tell account holders about material changes by email or on the site.