Privacy Policy
Last updated 9 September 2026. VanoeAI Ltd is the data controller for the personal data described here. Contact: support@vanoe.ai.
What we collect
- Account data: the email address and optional name you give at signup, your plan, and the hashed form of your API keys (we never store the key itself).
- Usage data: for every API call, the endpoint, the tickers requested, credits charged, timestamp, a request id, and the response status. This is the billing ledger and the basis for quotas and rate limits.
- Technical data: IP address and user agent in server logs, kept for security, abuse prevention (including limiting signups per network) and debugging.
- Billing data: handled by Stripe. We receive your Stripe customer and subscription identifiers, plan status and billing period; we never see or store card numbers.
- Webhook endpoints: the URLs and secrets you configure, and a delivery log per attempt.
Why we use it
To provide the Service and meter it (performance of our contract with you); to bill you (contract); to keep the Service secure and prevent abuse (our legitimate interests); to send service messages such as receipts, plan changes, incident and terms updates (contract and legitimate interests); and to comply with legal obligations such as tax records. We do not sell personal data and do not use it for advertising.
Who we share it with
Stripe (payments, based in the US with EU/UK operations); our hosting provider Render (servers in Frankfurt, Germany, with a US parent); and, where legally required, authorities. Ticker symbols you request are sent to the data sources we query on your behalf without any identifier of you. We use standard contractual safeguards for transfers outside the UK and EEA.
How long we keep it
Account data for as long as your account exists and for up to 12 months after it closes; usage and billing records for 7 years to meet tax and accounting rules; server logs for up to 90 days. You can ask us to delete your account at any time and we will remove everything not needed for those legal retention periods.
Your rights
Under UK and EU data protection law you can ask for access to your data, correction, deletion, restriction, portability, and to object to processing based on legitimate interests. Email support@vanoe.ai; we respond within one month. You can complain to the UK Information Commissioner's Office (ico.org.uk) or your local authority.
Cookies
The website sets no tracking or analytics cookies. Stripe's hosted checkout and customer portal set their own cookies under Stripe's privacy policy.
Security
API keys are stored only as SHA-256 hashes, all traffic is over TLS, secrets are held in the hosting provider's encrypted configuration, and access to production systems is restricted. No system is perfectly secure; tell us at once if you believe a key or account has been compromised.
Changes
We will post updates here with a new date and, for material changes, notify account holders by email.