Privacy Policy

1. Data controller

The controller responsible for processing personal data collected on the Altiora platform (accessible at altiora.pro ) is:

2. Data collected

We collect the following data:

• Account data: name, email address, hashed password
• Trading data: trade journals, performance statistics, metrics (PnL, win rate, etc.)
• Personal growth data: habits, goals, Deep Work sessions
• Connection data: IP address, browser type, connection timestamps
• Discord data: Discord ID if you connect your account
• Payment data: managed exclusively by our payment provider Stripe — we do not store any banking data

3. Purposes of processing

Your data is processed to:

• Provide and improve Altiora's services
• Manage your account and subscription
• Ensure the security of the platform
• Send you service-related communications (updates, alerts)
• Comply with our legal obligations

4. Legal basis

In accordance with the GDPR, the processing of your data is based on:

• Performance of the contract: to provide you with the subscribed services
• Our legitimate interest: improving our services, security
• Your consent: for marketing communications (opt-in)
• Legal obligation: retention of accounting and tax data

5. Retention period

• Active account data: subscription duration + 3 years
• Data after account deletion: 30 days (grace period), then permanent deletion
• Billing data: 10 years (legal obligation)
• Connection logs: 1 year

6. Data recipients

Your data may be shared with our subprocessors:

• Vercel — application hosting (United States, standard contractual clauses)
• Supabase / Neon — database (EU)
• Stripe — payments (United States, Privacy Shield)
• Resend — transactional emails
• Discord — optional integration

We never sell your data to third parties.

7. Your rights

In accordance with the GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing
• Right to restriction of processing

To exercise your rights, contact our DPO at dpo@altiora.pro. You may also lodge a complaint with the CNIL (www.cnil.fr).

8. Cookies

Altiora uses cookies strictly necessary for the operation of the service (session, interface preferences). No advertising or third-party tracking cookies are placed without your consent.

9. Security

Your data is protected by TLS encryption in transit and at rest. Passwords are hashed with bcrypt. Access to data is restricted to authorized personnel only.

10. Changes

Any substantial change to this policy will be notified to you by email or via a banner on the platform at least 30 days before it takes effect.