Privacy Policy · last updated May 1, 2026
Privacy Policy
i
Plain-language summary
We collect the minimum data needed to run the Service. We don't sell it, don't share it with advertisers, and we don't use your portfolio data to train AI models. You can export everything and delete your account at any time.
§ 01
Who we are
This Privacy Policy explains how Weblab Consulting LTD.("Foreqa", "we") collects and uses personal data when you use foreqa.com and the Foreqa applications. We are the data controller for the data we hold about you under the EU General Data Protection Regulation (GDPR).
§ 02
What we collect
tl;dr · Account info, portfolio data, app usage. No tracking pixels.
We collect:
- Account data — your email, hashed password, locale preference, billing details (processed by Stripe).
- Portfolio data — tickers, transactions, watchlist items, alerts, saved forecasts. Owned by you.
- Usage data — pages visited, features used, AI tier quotas consumed. No third-party trackers.
- Technical data — IP address, browser type, device type, retained 30 days for fraud and abuse detection.
§ 03
How we use it
tl;dr · Run the product, bill you, comply with the law.
We process your data to deliver the Service you subscribed to, to bill you, to send you operational email about your account, and to comply with our legal obligations under EU and applicable local law. We do not profile you for advertising.
§ 04
AI processing
tl;dr · Forecasts are generated by external AI models. We never send them your portfolio.
When you run an AI forecast, the ticker and the request parameters are sent to our third-party model providers (currently AWS Bedrock and Anthropic) under data-processing agreements. We do not send them your portfolio, your watchlist, your alerts, or your personal data. The forecast result is stored in your account if you save it.
§ 06
Your rights
Under GDPR you have the right to:
- Access — request a copy of your personal data (built-in JSON export on Pro, free on request for all tiers);
- Rectify — correct anything we hold;
- Erase — delete your account and all associated personal data within 30 days;
- Restrict — pause processing while a dispute is resolved;
- Object — opt out of any processing not strictly necessary for the Service;
- Lodge a complaint — with your local data-protection authority.
§ 07
Retention
Account and portfolio data is kept while your account is active. After deletion, identifying information is erased within 30 days; aggregated, non-identifying analytics may be retained for product improvement. Billing records are kept for 10 years as required by applicable tax law.
§ 08
International transfers
Primary infrastructure is hosted in the EU. Some processors (Stripe, AI inference) may transfer data to the US under Standard Contractual Clauses and additional safeguards as required by the European Court of Justice's Schrems II ruling.
§ 10
Contact
Questions about this policy or to exercise your rights: privacy@foreqa.com. Our Data Protection Officer can be reached at dpo@foreqa.com.