Privacy Policy

This Privacy Policy explains how FundedMetrics ("we", "us", "the Service") collects, uses, and protects your personal data when you use our website and trading analytics dashboard. We are committed to processing your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Italian law.

1. Data Controller

The data controller responsible for your personal data is Riccardo Savoca, operating as a sole trader based in Italy. Our VAT number is available on request. For any privacy-related enquiry, you can contact us at info@fundedmetrics.net.

2. What Data We Collect

Account data

When you register, we collect your username and email address. Your password is never stored in readable form — it is encrypted (hashed) using the bcrypt algorithm, and we have no way of accessing your original password.

Trading data

To power your dashboard, we process the contents of the Rithmic CSV files you choose to upload (such as trade history, instruments, timestamps, and profit/loss figures). This data is stored in our database and is used solely to generate your personal analytics.

Subscription and billing data

Payments and subscriptions are handled by our payment provider, Lemon Squeezy, which acts as Merchant of Record. We receive limited subscription information such as your customer ID, subscription status, plan, and renewal date. We do not collect, see, or store your credit card or payment details — these are handled entirely by Lemon Squeezy.

Technical data

We use a single essential authentication cookie (a JWT token stored as an httpOnly cookie) to keep you securely logged in. This cookie is strictly necessary for the Service to function.

3. Why We Process Your Data (Legal Basis)

• Performance of a contract (GDPR Art. 6(1)(b)) — to create and manage your account, process the trading data you upload, and provide the subscription service you signed up for.
• Legal obligation (GDPR Art. 6(1)(c)) — to keep billing and tax records as required by law.
• Consent (GDPR Art. 6(1)(a)) — where you have given it, for example for any optional marketing communications.

4. Third-Party Services

We rely on a small number of trusted providers to run the Service. These act as data processors or independent controllers:

• MongoDB Atlas — database hosting for your account and trading data.
• Lemon Squeezy — payment and subscription processing.
• Vercel — application hosting and content delivery.

Some of these providers are based outside the European Economic Area (including the United States). Where data is transferred internationally, it is protected by appropriate safeguards such as the providers' Standard Contractual Clauses.

5. How Long We Keep Your Data

We keep your account and trading data for as long as your account remains active. If you close your account or request deletion, we will delete your personal data, except where we are required to retain certain records (such as billing information) to comply with legal obligations.

6. Your Rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data ("right to be forgotten");
• restrict or object to certain processing;
• receive your data in a portable format (data portability);
• withdraw any consent you have given, at any time.

To exercise any of these rights, contact us at info@fundedmetrics.net. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

7. Cookies

We use only one strictly necessary cookie: an authentication token that keeps you logged in. We do not use advertising, profiling, or third-party tracking cookies.

8. Data Security

We take reasonable technical and organisational measures to protect your data, including password hashing, encrypted connections (HTTPS), and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically.