Edge Ladder privacy notice

Version 9 November 2026

Who is responsible

A Plus Sentinel Limited is the controller for personal information used to operate Edge Ladder. Use the support email above for privacy requests; put “Privacy — Edge Ladder” in the subject.

Information we process

• Account and sign-in details: email, display name, authentication-provider identifiers, account status, language and preferences.
• Saved research and messages you submit, such as notes, uploaded files, watchlists, questions to Buddy, support enquiries and requested alert settings.
• Membership records: trial eligibility and end date, subscription and customer identifiers, amounts and payment status supplied by Stripe. Full card numbers and card security codes are handled by Stripe, not stored in the application.
• Security and operation records: sign-in and activity times, feature requests, browser/device metadata, errors and IP information used for security. Some application records use a keyed IP hash; infrastructure logs may still contain IP addresses.
• Private provider credentials when you choose to connect a permitted source. These are stored encrypted and are not returned by the ordinary setup form.

Purposes and legal bases

We use necessary account, membership, research and support information to provide the service you request and perform the contract. We use proportionate security, abuse-prevention, trial-eligibility and operational records for legitimate interests in a secure and reliable service. We keep records where required by legal obligations. Optional marketing or other consent-based features require the appropriate separate choice; agreeing to the customer terms does not itself consent to marketing.

Other providers and optional features

Hosting, authentication, email, payment and AI providers process information needed for their functions. Current integrations include Google/Supabase for sign-in and Stripe for billing. Where you use Buddy's AI features, submitted questions and necessary context may be sent to the configured AI provider, including OpenAI. A selected voice or external-source feature may involve another provider; its availability and permissions remain separate from membership.

Providers may process data outside the EEA. Locations and safeguards depend on the provider and feature; contact us for the applicable transfer and processor information. Do not submit another person's private records or secret credentials in an ordinary chat or support message. We do not sell access to your private account records as part of the research service.

Cookies and saved preferences

We use necessary authentication and security cookies and saved display/language preferences. Third-party sign-in, payment or linked sites may set their own cookies when you use them. Any optional non-essential tracking requires an appropriate choice where required. Rejecting optional tracking must not be treated as consent to marketing or prevent necessary account access.

How long information is needed

Account and saved-work records are kept while needed to provide the account and requested research. Closure/deletion requests are reviewed against legal record-keeping, security, fraud-prevention and outstanding-claim needs. Limited trial-abuse markers may be retained where justified, so closure does not necessarily create another trial. Billing records may need to outlast an account for accounting or legal obligations. Retention must be proportionate to those purposes rather than keeping all personal information indefinitely.

Backups and preserved research evidence need separate treatment when records are deleted or anonymised; a restored backup must not silently reinstate access or undo an accepted erasure request. Public market experiment history is distinct from personal account data. You may ask what retention criteria apply to your records.

Your choices and rights

You may request access, correction, erasure, restriction or portability where applicable, and object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing. We may need proportionate identity verification and normally respond within one month, explaining any lawful extension. Some records cannot be erased immediately where a legal duty or another lawful exception applies; we will explain this.

You can complain to Ireland's Data Protection Commission or another competent supervisory authority. Providing necessary account information is required to open and secure the account; optional research submissions remain your choice. Automated market models produce research estimates, not guaranteed personal outcomes. Access and trial/payment checks are automated, and disputed account decisions can be raised with support.

Customer terms