Privacy Policy

1. What we collect

• Account data: your email address and authentication details.
• Trading 212 API key: stored encrypted. It is read-only and is used solely to fetch your data from Trading 212.
• Portfolio data: your order history, deposit history, holdings, and portfolio values, fetched from Trading 212 and processed to build your benchmark comparison.
• Messages: anything you send via the contact form or to support@benchmarked.cc.
• Technical data: logs and error reports needed to run and fix the service. Error reports are scrubbed of personal data and secrets before they are stored.

We do not collect data for advertising, and we do not sell or share your data for marketing.

2. How we use it

• To provide the service: syncing your account, computing comparisons, showing your dashboard (legal basis: performing our contract with you).
• To send transactional email such as sign-in links, sync notifications, and replies to your messages (contract and legitimate interests).
• To keep the service secure, debug errors, and prevent abuse (legitimate interests).
• To meet legal obligations where they apply.

We do not use your data to train AI models, and we do not profile you for automated decisions with legal or similarly significant effects.

3. Who processes it

We use a small number of service providers to run BenchMarked:

• Supabase - database and authentication (data hosting)
• Vercel - application hosting
• Resend - transactional email delivery
• Sentry - error monitoring (scrubbed of personal data before capture)
• Cloudflare - DNS and email routing
• Trading 212 - we fetch your data from them using your key; we send them nothing about you beyond the API requests your key authorises
• EODHD - market data provider; our requests to them contain ticker symbols and dates only, never your personal data

Some of these providers process data in the United States. Where they do, transfers are protected by UK-approved safeguards such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.

4. Cookies

BenchMarked uses essential cookies only, to keep you signed in. There are no advertising or analytics cookies, so there is no cookie banner.

5. How long we keep it

Your account and portfolio data are kept while your account is active. If you delete your account, your data is deleted from the production database promptly, and drops out of encrypted backups on the backup provider's rolling schedule. Support emails are kept as long as needed to handle your query and for a reasonable period afterwards.

6. Your rights

Under UK GDPR you can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interests. Email support@benchmarked.cc and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk), though we would appreciate the chance to resolve things first.

7. Security

Your Trading 212 API key is encrypted at rest. Access to production data is restricted, secrets are redacted from logs and alerts, and the key we hold is read-only, so it cannot be used to trade or withdraw even in the worst case.

8. Changes

If we make significant changes to this policy we will tell you by email or an in-app notice before they take effect.