1. Controller
Helicon Solutions LLC, 30 North Gould Street, Suite R, Sheridan, WY 82801, USA ("we") is responsible for the processing described here. Contact: support@commoditygraph.com.
2. Data about account holders
- Account: email address, password (stored only as a salted hash), plan, watchlist and alert preferences — to provide the Service (contract).
- Billing: handled by Stripe, Inc. / Stripe Payments Europe. We receive a customer ID, subscription status and billing country; we never see or store full card numbers (contract, legal obligations).
- Security and abuse prevention: a salted hash of your IP address and timestamps of sign-ups, logins, checkouts and screening runs, kept up to 2 days for rate limiting (legitimate interest).
- Product analytics: which upgrade prompts were shown or clicked, linked to your account or a random browser ID (legitimate interest).
- Screening inputs: names or IMO numbers you submit are processed to produce results; we store only the number of lines per run, not the content.
- Emails: alert digests and service messages to your email address (contract); you can switch digests off in your account.
3. Data about people in public records
The Service reproduces information about company officers and sanctioned persons as published in official sources (e.g. the Swiss Official Gazette of Commerce, sanctions lists): name, stated origin/nationality, place of residence and roles. We process it on the basis of our legitimate interest, and the public's, in transparency of commercial-register and sanctions information. Person pages about company officers are excluded from search-engine indexing. You can object, request correction or removal via the corrections & removal form or by email.
4. Cookies and local storage
We use one strictly necessary session cookie when you log in. Your browser's local storage keeps a list of recently viewed profiles and a random ID to limit how often upgrade suggestions appear; it never leaves your device except the random ID with paywall events. We do not use advertising or third-party tracking cookies.
5. Processors and transfers
We use service providers that process data on our behalf: our hosting provider (application server and database), Stripe (payments) and, where enabled, an email-delivery provider. Some providers are located outside Switzerland/the EEA; transfers rely on adequacy decisions or standard contractual clauses.
6. Retention
Account data is kept while your account exists and deleted within 30 days after you ask us to close it, except billing records we must keep for statutory periods (typically up to 10 years). Rate-limit records are deleted after 2 days.
7. Your rights
Subject to applicable law (including the EU/UK GDPR and the Swiss FADP) you can request access, correction, deletion, restriction, data portability, and object to processing based on legitimate interests. Contact support@commoditygraph.com. You can also lodge a complaint with your data-protection authority.
8. Changes
We will post updates to this policy on this page and indicate the effective date.