Privacy Policy

Greedy Insider is the data controller responsible for your personal data. For any privacy matter, or to exercise your rights, contact us at [email protected]. Our Service is operated under the laws of the Republic of Ireland and is subject to the EU GDPR, supervised by the Irish Data Protection Commission (DPC).

• Account data: your email address and email-verification status, managed through our authentication provider (Clerk), plus account timestamps (created, last login).
• Preferences & watchlist: the tickers, alert filters, display settings, and notification settings you choose.
• Notification records: a log of alert/digest emails we have sent you (recipient address, subject, timestamp, status).
• Feedback: the message you submit through the feedback widget, plus the page URL and screen size for context. Please do not include sensitive personal information in free-text feedback.
• Product analytics (consent only): anonymized usage events via PostHog (EU region), enabled only if you accept analytics cookies.
• Technical/security data: limited error-diagnostic data via Sentry (we do not send your email to Sentry), and standard server logs.

The insider-trading data displayed on the Service (SEC Form 4 filings, including insider names) is public-domain regulatory information about third parties, not data we collect about you.

• To provide your account and the Service (account data, preferences) — legal basis: performance of a contract (Art. 6(1)(b)).
• To send alert and digest emails you opt into — legal basis: consent (Art. 6(1)(a)); you can withdraw at any time.
• Product analytics — legal basis: consent (Art. 6(1)(a)), off by default and only after you accept.
• Security, error monitoring, and fraud prevention — legal basis: legitimate interests (Art. 6(1)(f)) in keeping the Service secure and reliable.
• Handling feedback and support — legal basis: legitimate interests (Art. 6(1)(f)) in improving the Service.

We use strictly necessary storage to keep you signed in and remember your settings; these cannot be turned off. With your consent, we also use analytics cookies/local storage (PostHog). We do not use advertising cookies. You can review and change your choices at any time via privacy preferences.

We do not sell your personal data. We share it only with service providers who process it on our behalf under data-processing agreements:

• Clerk — authentication and identity management.
• DigitalOcean — application hosting and managed database.
• PostHog (EU) — product analytics (consent only).
• Sentry — error and performance monitoring.
• Resend — transactional and alert email delivery.

Some of our providers are located outside the European Economic Area (for example, in the United States). Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework, as applicable. You may contact us for more information about these safeguards.

We keep your account data for as long as your account is active. Feedback submissions and notification logs are retained for up to 12 months and then deleted automatically. Analytics data is retained according to our analytics provider’s settings. When you delete your account, we erase or irreversibly anonymize your personal data without undue delay, except where we must retain limited information to comply with a legal obligation.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”);
• restrict or object to certain processing;
• data portability (receive your data in a structured, machine-readable format);
• withdraw consent at any time, without affecting prior processing;
• lodge a complaint with a supervisory authority — in our case, the Irish Data Protection Commission.

You can exercise the access, export, and erasure rights yourself from the Preferences → Account panel in the app (“Export my data” and “Delete account & data”), or by emailing [email protected]. We will respond within one month.

The Service is not directed to anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date above and, where appropriate, provide additional notice.

For any privacy question or to exercise your rights, contact us at [email protected].