Privacy policy
This Privacy Policy explains what personal data we collect, why we use it, and your choices. It does not change the fact that Aurum Desk is informational only and not liable for trading losses.
1. Who we are
Aurum Desk (“we”, “us”) operates the Service. For privacy questions contact desk@aurumdesk.com (or the contact published on the Service).
2. Data we collect
Account data: email, display name, password hash, tier, preferences, and approximate activity timestamps.
Billing data: processed by Stripe (or similar). We receive subscription status and customer identifiers; we do not store full card numbers.
Usage data: pages viewed, feature use, device/browser basics, IP address for security, and WebSocket presence while connected.
Communications: community chat messages, support emails, alert routing settings (e.g. Telegram/WhatsApp identifiers you provide).
Content you submit: notes, reactions, and similar inputs.
3. Why we use data
To create and secure your account, provide the Service, process subscriptions, send transactional messages, improve reliability, prevent abuse, and comply with law.
We do not sell your personal data.
4. Legal bases (UK/EEA)
Where UK GDPR / EU GDPR applies, we rely on: contract (providing the Service you request); legitimate interests (security, product improvement, fraud prevention); consent where required (e.g. certain cookies or marketing); and legal obligation where applicable.
5. Processors & transfers
We use infrastructure and vendors such as hosting providers, Stripe, email delivery, analytics (if enabled), and AI providers when you use Ask the Desk. They process data under their terms and our instructions.
Data may be processed outside your country. Where required, we use appropriate safeguards (e.g. standard contractual clauses).
6. Retention
We keep account and billing records for as long as your account is active and as needed for legitimate business, dispute, tax, and legal purposes. You may request deletion; we may retain limited data where required by law or for security.
7. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your data, and to object to certain processing. Contact us to exercise these rights. You may also complain to your local data protection authority (in the UK, the ICO).
8. Cookies
We use essential cookies/session storage for login and security. Optional analytics cookies, if used, will be described in-product. You can control cookies via your browser settings; disabling essential cookies may break login.
9. Children
The Service is not directed to anyone under 18. We do not knowingly collect data from children.
10. Changes
We may update this Policy by posting a new version with an updated date. Material changes may also be notified in-product or by email.