Privacy Policy

DeltaForm is responsible for the personal data described in this policy. For any privacy question, email support@deltaform.app.

• Account details — your name and email address. If you sign up with a password, it is stored by our authentication provider as a salted hash; we never see it. If you sign in with Google, we receive your name and email address from Google, and no password.
• Billing details — a customer reference, your plan, and its status. Card numbers go straight to Stripe and never reach our servers.
• What you build — the portfolios, positions, and modeling assumptions you save, so they are there when you come back.
• Technical records — IP address, browser type, timestamps, and error diagnostics, kept to run the service securely and to fix what breaks.
• Waitlist details — if you joined the waitlist before launch, the name, email, and answers you gave us then.

We run no product analytics and no advertising trackers, and we do not build a profile of you for marketing.

• To give you the service — sign you in, save your work, and show the data your plan includes.
• To take payment and manage your subscription.
• To keep the service secure and reliable, including detecting abuse and diagnosing faults.
• To reply when you contact support.
• To meet legal, tax, and accounting obligations.

We rely on performing our contract with you for the first two, our legitimate interest in running a safe service for the next two, and our legal obligations for the last.

We use a small number of service providers, each handling data only to do a job for us:

• Supabase — accounts, authentication, and the database holding your saved work.
• Vercel — application hosting and request logs.
• Cloudflare — storage for the historical market-data archive, and network delivery.
• Stripe — payments, subscriptions, and the billing portal.
• Sentry — error monitoring. When something breaks it receives the technical details of the failure and your account's user id, so we can tell which account hit the fault. It does not receive your name, your email, your password, your cookies, or a recording of your session.

These providers operate in several countries, so your data may be stored or processed outside the country you live in, under the safeguards their agreements with us require.

We may also disclose data where the law requires it, or to protect our rights or someone’s safety. If the business is ever sold or reorganised, data may transfer with it, and this policy would continue to apply.

We do not sell your personal data, and we do not share it for advertising.

We use cookies and browser storage only to keep you signed in and to remember your workspace settings. There are no advertising or cross-site tracking cookies, which is why you see no cookie banner.

We keep your account and saved work for as long as your account exists. When you ask us to delete your account, we remove your personal data and your saved work, except records we must keep for tax, accounting, or fraud-prevention reasons — for example payment records, which we keep for as long as the law requires us to keep them (currently five years). Technical logs are kept for a short period and then discarded.

You can ask us to give you a copy of your personal data, correct it, or delete it. You can change your name, email, and password in the app, and cancel or change your plan in the billing portal. For anything else, email support@deltaform.app and we will respond within 30 days. If you are unhappy with our answer, you can complain to your local data-protection authority.

Access to your data is restricted by database-level rules so that one account cannot read another’s. Traffic is encrypted in transit, passwords are hashed, and card details never touch our servers. No system is perfectly secure, so if a breach ever affects you we will tell you and the relevant authority as the law requires.

DeltaForm is not for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, email us and we will remove it.

If we change this policy in a way that materially affects you, we will tell you by email or in the app before it takes effect. The effective date at the top of this page always tells you which version is current.