Privacy Policy

BacktestPro is operated by Voxbox Ltd, a company registered in England and Wales. This policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Data Controller: Voxbox Ltd
Website: backtestpro.io
Contact: privacy@backtestpro.io

2. What data we collect

We collect the following categories of personal data:

• Account data: email address, name, and authentication credentials managed via Clerk.
• Usage data: backtest runs, saved backtests, and feature interactions stored in our database.
• Payment data: billing information processed by Stripe. We never store card details directly.
• Technical data: IP address, browser type, and pages visited, collected via standard server logs.

3. How we use your data

We use your data to:

• Provide and maintain the BacktestPro service
• Process payments and manage your subscription
• Enforce free tier limits and plan entitlements
• Send transactional emails (e.g. receipts, signal alerts you have opted into)
• Improve the platform and diagnose technical issues

Our legal basis for processing is contract performance (to provide the service you signed up for) and legitimate interests (service improvement and security).

4. Data sharing

We share data only with the following sub-processors, each bound by appropriate data protection agreements:

• Clerk — authentication and user management
• Supabase — database hosting
• Stripe — payment processing
• Vercel — website hosting
• Railway — backend API hosting
• Anthropic — AI features (where used)

We do not sell your personal data to third parties.

5. Data retention

We retain your account data for as long as your account is active. If you delete your account, your personal data is deleted within 30 days, except where we are required to retain it for legal or tax purposes (typically 7 years for financial records).

6. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email privacy@backtestpro.io.

7. Cookies

We use strictly necessary cookies for authentication sessions. We do not use advertising or tracking cookies. No cookie consent banner is required for strictly necessary cookies under UK PECR.

8. Security

All data is transmitted over HTTPS. Passwords are never stored — authentication is handled by Clerk. Payment data is handled entirely by Stripe and never touches our servers.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or via an in-app notice.