Privacy Policy

Vettro is run by Sheldon Lines, trading as Vettro (“we”, “us”; our contact details are on our Contact page). We decide how and why your personal information is used, so we are responsible for it. In legal terms we are the “controller” under GDPR and UK GDPR, and the “responsible party” under POPIA.

Privacy questions and requests: [privacy email — privacy@domain]. Our Information Officer is named in section 10.

EU and UK representatives: we don't currently have a representative in the EU or the UK. If the law requires us to appoint one, we'll name them here.

We collect only what we need to run Vettro:

What we don't collect

• We never ask for your broker or exchange login, account balances or trading history from your broker.
• We don't ask for ID documents.
• We don't use advertising or cross-site tracking cookies.
• We don't ask for sensitive information such as health, religion or political views. Please don't put any in your questions or feedback.

Market research on Vettro (prices, news, events, market briefs, cross-market reactions) is about markets, not about you, and is the same for everyone who follows a market.

Privacy laws require a lawful reason for each use of your information. Ours are:

• To provide the service you signed up for (your account, the markets you choose, their research and answers to the questions you ask). In legal terms: performing our contract with you.
• To keep a record of the terms you accepted, to keep Vettro secure, prevent abuse and improve it, in ways you'd reasonably expect. In legal terms: our legitimate interests, balanced against your rights.
• To send product news emails (such as when Pro opens), only if you asked for them by ticking “Email me Vettro product news” at sign-up or switching it on in Settings. In legal terms: your consent, which you can withdraw at any time with the unsubscribe link in every such email, or in Settings → Emails. We keep the date of your choice, to show you agreed. Service emails (such as password resets, receipts and renewal reminders) aren't marketing.
• To meet legal duties, for example tax records or responding to lawful requests. In legal terms: legal obligation.

We use your information only for these purposes. Under POPIA, we process personal information only for these specific, lawful purposes, and we keep it no longer than needed (section 7).

Vettro uses an AI provider (Anthropic) on our behalf. What it receives that relates to you: the questions you type in “Ask about this market”, together with Vettro's own information on that market, to write the answer. It doesn't receive your name, email address or account. We don't keep your questions or the answers.

Anthropic processes this as our service provider under its commercial terms, which don't allow it to use our customers' content to train its models.

Vettro does not use AI or any automated system to make decisions about you that have legal or similarly significant effects.

We never sell your personal information, and we don't share it for targeted advertising. We share it only with:

• Service providers who help us run Vettro (our database and login provider, website and engine hosting, AI provider and email provider), under contracts that require them to protect it and use it only for us. The full list, what each does and where it may store data is on the Sub-processors page.
• Paddle, which sells Pro as our merchant of record. Paddle collects your payment and billing details itself and is responsible for them as an independent controller, under Paddle's privacy policy. Paddle tells us your subscription status, country and a customer reference.
• Google, only if you choose “Continue with Google”. Google handles your Google account under its own privacy policy.

News and calendar sources don't receive any personal information about you. We may also share information if the law requires it, to protect people's safety or our legal rights, or as part of a sale or merger of our business, in which case this policy would continue to protect it and we'd tell you first.

Vettro is a global service, and our providers may store or process information outside your country, for example in the United States or the European Union. When that happens, we use the safeguards the law requires: the European Commission's standard contractual clauses or an adequacy decision for information from the EU, the UK's international data transfer addendum for information from the UK, and, for information from South Africa, transfers only to providers bound by contracts or laws giving protection equivalent to POPIA (section 72). Where each provider may store data is listed on the Sub-processors page.

Wherever you live, you can:

• Download your data: get a copy of the personal information we hold about you, including your settings and the markets you chose, in a machine-readable file (Settings → Download my data).
• Delete your account: and with it your personal information (Settings → Delete my account), apart from the records we must keep (section 7).
• Correct information that is wrong or out of date.
• Object to or restrict some uses of your information, and withdraw consent, for example to update emails.
• Complain to a privacy regulator (see below).

You can also email [privacy email — privacy@domain]. How requests and complaints work is explained in section 9. Using your rights is free, and we'll never treat you differently for using them.

South Africa (POPIA)

You can ask whether we hold information about you, what it is and who has seen it; ask us to correct or delete it; object to its use, including for direct marketing; and complain to the Information Regulator (South Africa).

European Union and EEA (GDPR)

You have the rights above, including data portability. You can complain to the data protection authority in the country where you live or work.

United Kingdom (UK GDPR)

You have the same rights as under GDPR. You can complain to the Information Commissioner's Office (ICO).

United States (state privacy laws, such as California's CCPA/CPRA)

Depending on your state, you can ask to know what personal information we collect and how we use it, and ask us to delete or correct it. We don't sell personal information or share it for cross-context behavioural advertising, so there is nothing to opt out of. You can use an authorised agent to make a request for you.

• Download or delete: use Settings → Download my data, or Settings → Delete my account.
• Anything else (a copy of your data, a correction, an objection, or a complaint): email [privacy email — privacy@domain], saying what you'd like and which email address your account uses.

We may need to confirm it's really you before acting, usually by replying to the email address on your account. We acknowledge requests within 5 working days and give a full answer within 30 days. If a request is complicated, we may need up to two more months, as GDPR allows; we'll tell you within the first 30 days if so. More on complaints is on our Contact & complaints page.

You can always complain to a privacy regulator, whether or not you've contacted us first: the Information Regulator (South Africa), the Information Commissioner's Office (UK), the data protection authority where you live or work (EU and EEA), or your state's privacy regulator or attorney general (US).

South Africa's Protection of Personal Information Act (POPIA) requires us to have an Information Officer, registered with the Information Regulator. Our Information Officer makes sure we follow POPIA, deals with requests about personal information, and works with the Regulator.

Information Officer: Sheldon Lines. Email: [privacy email — privacy@domain].

We use encrypted connections (HTTPS), store passwords only in hashed form through our login provider, restrict access to personal information to those who need it, and set up our database so each user can only reach their own data.

If there's a breach: no system is perfectly secure. If a security breach affects your information, we tell the relevant regulators as the law requires (under GDPR and UK GDPR, within 72 hours of finding out; under POPIA, as soon as reasonably possible), and we tell you as soon as reasonably possible, with what happened and what you can do.

Vettro is only for people aged 18 and over. We don't knowingly collect information from anyone younger. If you think a child has given us information, contact us and we'll delete it.

We use only the cookies needed to keep you logged in and to run Vettro securely. No advertising, analytics or tracking cookies. See our Cookie Policy.

If we change how we use your information, we'll update this page and its version date. For important changes, we'll tell you by email or in the Web App at least 30 days before they apply.

Sheldon Lines, trading as Vettro; contact details on our Contact page. Privacy requests: [privacy email — privacy@domain]. Information Officer: Sheldon Lines. Complaints: Contact & complaints.