Terminal Pricing DE

Privacy Policy

This is a convenience translation. The legally binding version is the German one — in case of discrepancies, the German text prevails.

Last updated: July 2026.

1. Controller

Dipl.-Ing. Rainer Böke
Contact: info@moatscan.ai
Full address in the Imprint.

2. What data do we process?

On registration: email address, password (bcrypt hash), optional display name. Legal basis: Art. 6(1)(b) GDPR (pre-contract).
On login: session token (sha256 hash), user agent, IP address, login timestamp. Legal basis: Art. 6(1)(f) (legitimate interest — security, abuse detection).
For Pro subscription: email, Stripe customer ID, subscription ID. Payment data (card, address) is processed exclusively by Stripe Payments Europe Ltd. — we never see it.
During use: stock tickers viewed, timestamps. For tier limits and to improve recommendations. Legal basis: Art. 6(1)(b)/(f).

3. Cookies

We use only functionally necessary cookies (session cookie for login, language choice). Pursuant to § 25(2) TTDSG these require no consent. There is no tracking or advertising-network use.

4. Third parties

Stripe Payments Europe Ltd. (Ireland) — payment processing. DPA concluded via Stripe default terms. Privacy: stripe.com/privacy.
Anthropic PBC (USA) — AI analysis models (Claude). Data: stock tickers + fundamentals to generate the texts. No personal user data sent to Anthropic. Standard contractual clauses (Art. 46 GDPR) via the API ToS.
EODHD APIs (Estonia) — market data. No personal data transmitted.
Google LLC — optional on login with Google (Authlib OAuth). Only email + name are transmitted.

5. Your rights

Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21).
Requests to info@moatscan.ai — we reply within 30 days.
Right to lodge a complaint with the competent data protection supervisory authority.

6. Retention

Account data: until account deletion. Login events: 12 months. Stripe payment data: statutory retention (HGB/AO, 10 years) via Stripe itself.

7. Data security

Passwords are hashed with bcrypt (cost factor 12). Session tokens are stored only as a SHA-256 hash in the database. Transport is HTTPS-encrypted. The database server is located in Germany.