Privacy Policy for Money Flow

This privacy policy covers the Money Flow product on indicator.trading (product pages, login, customer area, order confirmation page). The editorial sections of the website (encyclopedia, guides) are covered by the separate privacy policy linked there.

1. Controller

pg.ventures GmbH, Ziflinger Weg 11, 93413 Cham, Germany, info@indicator.trading

2. Hosting (Vercel)

Our website is hosted by Vercel Inc. (USA); our application's server region is Frankfurt, Germany. When you visit our pages, Vercel processes technically necessary data (IP address, date/time, requested page, user agent) in server logs. Legal basis: Art. 6 (1) (f) GDPR. A data processing agreement is in place; transfers to the USA rely on EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

3. Database and accounts (Supabase)

We use Supabase (EU region Frankfurt) for accounts, access control and subscription status. Processed data: email address, password (stored exclusively as a cryptographic hash), subscription status and periods, technical account metadata. Legal basis: Art. 6 (1) (b) GDPR. A data processing agreement is in place.

4. Cookies

We use authentication cookies of our auth system (Supabase, names starting with "sb-…") to maintain your session, and "NEXT_LOCALE" to store your language preference. Legal bases: Art. 6 (1) (b)/(f) GDPR, Sec. 25 (2) No. 2 TDDDG. On the product page (/de/money-flow or /en/money-flow) we load a Digistore24 script (digistore24-scripts.com). If the URL contains the partner parameter "aff" (optional "cam"), Digistore24 sets a cookie for partner attribution so a later purchase can be credited to the referring partner; the script also adjusts order-form links. Digistore24 processes these data as an independent controller. Legal basis on our side for embedding the script: Art. 6 (1) (f) GDPR (legitimate interest in operating the partner programme); Sec. 25 (2) No. 2 TDDDG where storage access is technically necessary for attribution.

5. Analytics (Vercel Analytics)

We use Vercel Analytics in its cookieless mode. No cookies are set and no cross-device profiles are created; aggregated usage data (page views, referrer, country, device type) is collected using anonymized identifiers that do not permit recognition beyond the current day. Legal basis: Art. 6 (1) (f) GDPR.

6. Purchase and payment (Digistore24)

Purchases are processed by Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany, acting as reseller. Digistore24 is your contractual partner for the purchase and processes the data collected during checkout (name, address, email, payment data) as an independent controller; Digistore24's privacy policy applies. Payment data never reaches us. After an order, Digistore24 transmits order and contract data to us (including email, name, order ID, chosen payment plan, payment and cancellation status) so that we can create your account, control access and perform the contract. Legal basis: Art. 6 (1) (b) GDPR. For partner attribution (see section 4) the Digistore24 promocode script is loaded on the product page. Without a partner-link visit Digistore24 typically does not set a partner cookie; checkout works without this script as well.

7. Email (Brevo)

For transactional emails (e.g. access setup, password reset) and the contractually owed briefing emails (Tuesdays and Thursdays) we use Brevo (Sendinblue GmbH, Berlin). Processed data: email address, name (where available), subscription-related attributes, delivery data. Legal basis: Art. 6 (1) (b) GDPR. A data processing agreement is in place. Marketing emails are only sent with separate consent (Art. 6 (1) (a) GDPR), revocable at any time; every email contains an unsubscribe option.

8. Retention

Account and contract data is stored for the duration of the contract and thereafter as required by statutory retention obligations (up to 10 years for accounting-relevant records under German law). Server logs are deleted automatically after a short period. Payment event records received from Digistore24 are retained for the statutory periods.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6 (1) (f) GDPR (Art. 21). Contact: info@indicator.trading. You also have the right to lodge a complaint with a supervisory authority; the authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach, Germany.

10. Obligation to provide data

Providing an email address and password is required to create an account and perform the contract; without them, the service cannot be used.