Privacy policy

Who is responsible

The controller under Art. 4(7) GDPR is Ariadne Atlas, owner Alexander Giessmann, Alpstr. 50, 6890 Lustenau, Austria — contact@ariadneatlas.com. Write to this address with any question about your data or to use any of the rights below. We are not required to appoint a data protection officer.

This website

This site has no account and no tracking, and its one form is the waitlist (below). When you open a page, our host (Cloudflare, Inc.) necessarily receives your IP address, browser type and the page requested in order to deliver it and to protect the site against attacks. We do not use that data ourselves. Fonts and images are served from this site; no page loads anything from a third party. Legal basis: Art. 6(1)(f) GDPR, our interest in delivering a secure website.

The waitlist

If you join the waitlist we process your email address, the language of the form, and the time and IP address of your sign-up and of your confirmation, which we keep as proof that you consented. We use it for one purpose: to tell you when ARIADNE opens sign-ups.

• Legal basis — your consent (Art. 6(1)(a) GDPR). You are added only after you click the link in the confirmation email we send (double opt-in).
• Withdrawing — any time, through the unsubscribe link in every email or by writing to contact@ariadneatlas.com. That does not make earlier processing unlawful.
• Who handles it — the form sends your address to this website's server at Cloudflare, Inc., which keeps the sign-up and the proof of consent. Resend, Inc. (United States) sends the emails for us.
• How long — sign-ups that are never confirmed are deleted after 30 days. Confirmed addresses are kept until you unsubscribe, and the list is deleted at the latest six months after the email announcing that sign-ups are open.

The ARIADNE app: what we collect

Data you give us:

• Account — username, email address and password (stored only as a salted hash). If you sign in with Google or X, we receive your account identifier and the email address that provider shares with us; we never see your password there.
• Your content — watchlists, portfolios and trades you record, saved option strategies, research notes, uploaded documents, alerts, terminal layouts, and your conversations with the AI analyst, including files you attach to them.
• Community — messages you post in community rooms. Other members of a room can read what you post there, under your username.
• Notifications — the channels you choose for alerts. If you connect Telegram, we store the chat identifier Telegram gives us.
• Billing — your plan, its status and the customer reference of our payment provider. Card and payment details go to the payment provider and never reach us.

Data that arises when you use it:

• AI usage — for each run of the AI analyst: when it ran, which model answered, how many tokens it used and whether it completed. We need this to count your plan's allowance.
• Technical data — your IP address is used briefly to rate-limit requests and is not stored with your account. Server logs may contain your username and the requests made, and are overwritten as they rotate.

Why we use it, and the legal basis

• Providing the service you signed up for (Art. 6(1)(b) GDPR — contract): your account, everything you save, alerts you set, sign-in with Google or X, community posts, and answers from the AI analyst.
• Billing (Art. 6(1)(b)): your subscription, handled by our payment provider.
• Security and abuse prevention (Art. 6(1)(f) — legitimate interest): rate limiting, logs, and keeping the service available.
• Emails you need (Art. 6(1)(b)): confirming your address, resetting your password, and alerts you have asked for. We do not send newsletters or advertising.

Who else handles it

We use the processors below, each bound by a data processing agreement and not allowed to use your data for their own purposes.

• Hosting — Hetzner Online GmbH, Germany runs the app, its database and the storage for uploaded documents.
• Payments — Paddle.com Market Limited (United Kingdom) is the merchant of record: when you pay, you buy from Paddle, which collects your payment details and issues the invoice under its own privacy policy.
• AI processing — your questions to the AI analyst, files you attach, and the notes or documents it reads on your behalf are sent to a US-based AI gateway, which passes each request to one of several model providers. These may be in the United States or other countries outside the EU. Don't put anything into a question you would not want processed this way.
• Email delivery — Resend, Inc. (United States) sends account and alert emails.
• Telegram (only if you connect it) — alerts are delivered through Telegram's bot service.
• Google and X (only if you sign in with them) — they confirm who you are.

Transfers outside the EU/EEA rely on an adequacy decision (including the EU–US Data Privacy Framework where the recipient is certified) or on the European Commission's standard contractual clauses. We do not sell personal data and do not use it for advertising.

How long we keep it

Your account and everything in it are kept for as long as the account exists and are deleted when you delete it. Community messages are deleted with the account. Server logs are overwritten as they rotate. Payment and invoice records are kept by our payment provider for as long as tax law requires.

Your rights

Under the GDPR you have the right to:

• Access your data and receive a copy (Art. 15), and take it with you in a machine-readable format (Art. 20) — the export in Settings does both;
• Correct it (Art. 16);
• Erase it (Art. 17) — deleting your account in Settings removes it and everything tied to it, irreversibly;
• Restrict its processing (Art. 18);
• Object to processing based on legitimate interest (Art. 21);
• Complain to a supervisory authority — in Austria the Datenschutzbehörde (dsb.gv.at), or the authority where you live.

We answer requests within one month.

Cookies and browser storage

The app uses one cookie and your browser's local storage, all of it strictly necessary:

• Sign-in cookie — keeps you signed in. Scripts cannot read it, it is sent only over an encrypted connection, and it lasts 30 days if you choose to stay signed in, otherwise until you close the browser.
• Local storage — remembers your terminal layouts, panel settings, chart drawings and recently opened items on your device, so the app opens the way you left it. It is not used to track you.

Because these exist only to provide the service you asked for, they need no consent under §165(3) of the Austrian Telecommunications Act (TKG 2021). We use no analytics, advertising or tracking cookies, and this website sets none at all.

Automated decisions

ARIADNE finds and explains information; it makes no investment decisions for you, and no automated process makes a decision about you with legal or similarly significant effect (Art. 22 GDPR).

Age

ARIADNE is meant for adults. Don't create an account if you are under 18.

Changes

If this policy changes materially, the date at the top changes with it, and account holders are told by email.