Privacy Policy
This policy explains what personal data EdgeMarket collects, why, on what legal basis, who it is shared with and what rights you have. It is written to meet Regulation (EU) 2016/679 (the "GDPR").
1. Data controller
The controller is Danjel Durmo, operating the service EdgeMarket (edgemarket.app), Italy.
Contact for any privacy matter: info@edgemarket.app
We have not appointed a Data Protection Officer, as we are not required to.
2. What we collect
| Category | Data | Where it comes from |
|---|---|---|
| Account | Email address, authentication identifier (UID), sign-in provider, display name and profile picture if you sign in with Google, email verification status, dates of registration and last sign-in. | You, and Firebase Authentication. |
| Billing | Subscription plan and status, renewal date, credit balance and credit history, Stripe customer and subscription identifiers.We never receive or store your card details. | You, and Stripe. |
| Usage | Which items you follow, alert settings, activity counters, and technical logs (IP address, request metadata, timestamps, user agent). | Automatically, as you use the Service. |
| Telegram (optional) | If you connect Telegram: your chat identifier and, where available, your Telegram username. Only if you choose to connect it. | Telegram, when you link your account. |
| Correspondence | Messages you send us and our replies. | You. |
We do not knowingly collect special categories of data, and we do not carry out profiling that produces legal effects or similarly significant effects on you.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Creating and running your account, providing the platform | Performance of a contract — Art. 6(1)(b) |
| Processing subscriptions, credits and payments | Performance of a contract — Art. 6(1)(b) |
| Sending Telegram alerts you have asked for | Performance of a contract — Art. 6(1)(b), following your explicit request |
| Keeping the Service secure, preventing abuse and fraud, diagnosing faults | Legitimate interests — Art. 6(1)(f) |
| Accounting and tax records | Legal obligation — Art. 6(1)(c) |
| Replying to your messages | Legitimate interests — Art. 6(1)(f) |
Where we rely on legitimate interests, we have considered your rights and expectations and believe our processing does not override them. You can object at any time (see section 7).
We do not use your personal data for advertising, and we do not sell it.
4. Who we share it with
We share data only with processors that are necessary to operate the Service, each bound by a data processing agreement:
- Google Ireland / Google LLC (Firebase Authentication) — account authentication.
- Stripe Payments Europe / Stripe, Inc. — subscriptions and payments.
- Telegram Messenger — only if you connect Telegram, to deliver the messages you requested.
- Hetzner Online GmbH (Germany) — server hosting; data is stored on servers in the European Union.
We may also disclose data where required by law, court order or a competent authority, or to establish, exercise or defend legal claims. If the Service is ever transferred as part of a business sale, data may transfer with it, and you will be informed.
5. Transfers outside the EU
Some processors (Google, Stripe, Telegram) may process data outside the European Economic Area, including in the United States. Such transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework, together with supplementary measures. You may request a copy of the relevant safeguards at the contact address above.
6. How long we keep it
- Account and usage data — while your account is open, and up to 12 months after closure to handle disputes and prevent abuse.
- Billing and accounting records — 10 years, as required by Italian tax law.
- Technical logs — normally up to 30 days.
- Telegram link — until you disconnect it or close your account.
- Correspondence — up to 24 months.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you, and obtain a copy;
- have inaccurate data corrected;
- have your data erased, where the conditions apply;
- restrict processing in certain circumstances;
- receive your data in a portable, machine-readable format;
- object to processing based on our legitimate interests;
- withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
Write to info@edgemarket.app. We reply within one month, extendable by two further months for complex requests. There is no charge unless a request is manifestly unfounded or excessive.
You also have the right to lodge a complaint with a supervisory authority — in Italy theGarante per la protezione dei dati personali (garanteprivacy.it) — or with the authority of your country of residence.
8. Cookies and local storage
We do not use advertising or analytics cookies, and we do not track you across other sites. The Service stores technical data in your browser that is strictly necessary to keep you signed in and to remember interface preferences:
- Authentication tokens, held in your browser's local storage by Firebase Authentication. Without them you would be signed out on every page load.
- Interface preferences, such as whether the navigation is collapsed.
These are strictly necessary and do not require consent under Art. 122 of the Italian Privacy Code. Clearing your browser storage will sign you out. See ourCookie Policy for the detail.
9. Security
We use HTTPS throughout, store credentials with a specialised authentication provider rather than ourselves, restrict database access, and keep secrets outside the application code. No system is completely secure; if a breach affects your rights we will notify the supervisory authority, and you, as required by Arts. 33–34 GDPR.
10. Children
The Service is not intended for anyone under 18 and we do not knowingly collect their data. If you believe a minor has registered, write to us and we will delete the account.
11. Changes to this policy
We may update this policy. The date at the top will change and, for material changes, we will notify account holders through the Service or by email.
12. Contact
Data controller: Danjel Durmo — EdgeMarket
Email: info@edgemarket.app