Privacy Policy

1. Data controller

Krito AI is operated by [COMPANY NAME], [ADDRESS], Spain. Contact: [CONTACT EMAIL].

We process personal data under the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).

2. What we store

Your email address and login credentials (passwords are stored hashed); your plan; your report history (which tickers you researched and when); and basic technical logs needed to run and secure the service. We do not ask for your age, income, net worth or risk profile.

3. Why we use it

To provide your account and reports (performance of contract), to enforce credit limits and prevent abuse (legitimate interest), to process payments and keep invoices (legal obligation).

4. Who processes data for us

Anthropic (generates the AI reports — receives the stock ticker and market data, not your email); Finnhub (provides market data — receives stock tickers only); our hosting and database provider (stores your account and reports); and Paddle.com, our Merchant of Record, for the sale of subscriptions, payments, tax compliance and invoicing. Some providers are located outside the EU; transfers rely on Standard Contractual Clauses or equivalent safeguards.

5. Cookies

We only use essential cookies and browser storage required to keep you logged in and remember your preferences. We do not use advertising or tracking cookies.

6. How long we keep it

Account data is kept while your account is active. When you delete your account, your profile, usage history and login are deleted. Billing records are kept as long as tax law requires.

7. Your rights

You may access, correct, delete, export or restrict the processing of your data, and object to processing. You can download your data and delete your account from Account settings, or email [CONTACT EMAIL]. You may also complain to the Agencia Española de Protección de Datos (aepd.es).