ThetaSmith is operated by Investmetric Ltd, a company registered in England and Wales under company number 11763947, with registered office at 85 Great Portland Street, First Floor, London, England, W1W 7LT ("we", "us", "our"). We are the data controller for the personal data described in this Policy. For any privacy question or to exercise your rights, contact us at admin@investmetric.co.uk.
| Category | Examples |
|---|---|
| Account data | Username, email address, hashed password, role/subscription tier, preferences (currency, timezone). |
| Billing data | Subscription plan, billing status, and a payment-provider customer ID. Card details are handled by Stripe — we never see or store your full card number. |
| Content you create | Strategies, backtests, portfolios, factors, settings and other inputs you save in the Service. |
| Usage & technical data | Log data, IP address, device/browser type, pages and features used, timestamps, and diagnostic data. |
| Communications | Messages, support requests and any content you post in community features. |
| Cookies | Essential cookies/local storage for login sessions and preferences (see section 5). |
We process personal data under the following legal bases (GDPR Art. 6):
Payments are processed by Stripe, which acts as an independent controller/processor for payment data under its own privacy policy. We receive limited billing information (such as subscription status and a customer reference) but not your full card details.
We use strictly necessary cookies and browser local storage to keep you logged in and remember preferences. We may use limited analytics to understand usage. Where required by law, we ask for your consent to non-essential cookies, and you can control cookies through your browser settings. Disabling essential cookies may prevent the Service from working.
We share personal data only with service providers ("processors") who help us run the Service, under appropriate contracts, including:
We may also disclose data where required by law, to enforce our terms, or in connection with a business transfer. We do not sell your personal data.
Some providers may process data outside your country or the EEA. Where that happens, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) to protect your data.
We keep personal data for as long as your account is active and as needed to provide the Service. After you close your account we delete or anonymise your data within a reasonable period, except where we must retain certain records (for example, billing and tax records) to comply with legal obligations.
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to address incidents appropriately.
Subject to applicable law (including the GDPR for EU/EEA users), you have the right to:
To exercise any of these, contact us at admin@investmetric.co.uk. You can also delete your account and its associated data from your account settings.
The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
We may update this Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by email or a notice in the Service). The "Last updated" date above shows when it last changed.
For privacy questions or to exercise your rights, contact Investmetric Ltd at admin@investmetric.co.uk, 85 Great Portland Street, First Floor, London, England, W1W 7LT.