Privacy policy

Optional marketing emails

With your separate consent, MarketRooms may email you product updates, community news, and offers. Marketing is optional and does not affect account access. We record your choice, its date, source, and the consent wording version. You can withdraw consent in Preferences. Service emails, such as sign-in codes and support replies, are separate from marketing.

Community visitor counts

We keep one account-to-community record when you visit a community while signed in, so repeated visits count once in its public visitor total. Available participation history also contributes to this count. The public total does not identify visitors. This record contains no IP address, visit timestamps or visit frequency. You can export your recorded community visits with your account data; we remove these records when you delete your account. Anonymous page views are not treated as distinct people. This feature does not enable optional web or extension analytics.

Support, private staff conversations, and badges

When you contact support, we process your verified email address, request, replies, timestamps, and privacy acknowledgment to respond to your request. Staff may also contact you privately about moderation or account issues. We rely on providing the requested service and, where applicable, our legitimate interests in operating a safe community. These emails concern your case and are not marketing.

Support conversations are accessible to you and authorized support staff. Administrators manage support cases; room moderators can access only cases assigned to them in their authorized rooms. Being a moderator or administrator does not grant access to user-to-user direct message inboxes. Resend processes your email address and the support reply, including its subject and message text, when we send you a notification.

Your support history is included in your account export and removed when you delete your account. Resolved cases are automatically removed after twelve months of inactivity. Public community badges can show their name, artwork, explanation, award date, and room scope. Internal award reasons and staff audit records are restricted to authorized staff.

Direct messages

Direct messages use a separate inbox shared with the person you choose. We process message text, replies, reactions, participant identifiers, timestamps, read progress, and mute preferences to deliver the conversation. Your email address is not shown to the other participant. Messages are stored on our servers and are not end-to-end encrypted.

Only the two participants can open a direct conversation through the service. Blocking stops further messages in both directions. Muting suppresses the conversation's unread badge. When a participant reports a message, the reported text and relevant identifiers are copied to a restricted review queue. Authorized administrators can review that report, with access recorded in the audit log; reporting does not open the rest of the inbox to staff.

Deleting one of your direct messages immediately removes its text from the conversation, quoted replies, inbox previews, and account exports. A restricted server copy is retained for 90 days so a participant can report abuse after deletion. It is not available through a general staff archive. After 90 days that copy is purged; a report already filed follows its separate review retention period. Audit entries record the deletion and identifiers without copying the message text.

Your direct message history is included in your account export. If you delete your account, your profile is anonymized and sending is disabled; the other participant can still read their conversation with a Deleted account label. Message text can still contain information you wrote about yourself. Contact us about a specific erasure request. Closed direct message report snapshots become eligible for removal after 90 days; open reports remain available for review. Backups follow the separate retention and restoration process described below.

1. Who controls your data

The data controller is SANTIANT LABS LTD, registered in England and Wales under company number 17450301. Its registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. For privacy questions or to exercise your rights, email [email protected].

2. Data we use and why

Chart detection uses public chart context for room routing and does not extract broker or wallet credentials, orders, positions, or account details as structured data. Screenshots you request can nevertheless include any sensitive information visible in the captured area, including positions, balances, orders, and account details. Images you select, paste, or capture are processed for chat and are not automatically redacted. Hide sensitive information before capturing and review images before sharing. The extension does not collect unrelated browsing history. Clipboard images are processed only when you paste them into the focused chat composer.

3. Analytics and browser storage

Web analytics and extension analytics are off by default. If you accept, the service may process an anonymous identifier, event name, surface, source, extension version, low-cardinality room type or asset class, and metadata key names. We do not send message contents, email addresses, raw room IDs, symbols, tokens, portfolio data, or unrelated browsing activity to analytics. See the cookie policy and use “Privacy settings” in the footer to change your choice at any time.

4. Chrome extension Limited Use

The use of information received from Google APIs by MarketRooms will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. The extension handles data only as necessary to provide, secure, maintain, and improve its single purpose: independent public market chat routed to the chart context you choose.

MarketRooms does not sell user data, use or transfer it for advertising or creditworthiness, or permit human access except with your specific consent, for community safety and abuse investigation, or where required by law. Optional analytics are bounded, off by default, and used only to operate and improve this chat service.

Advertising plans

The service launches free of charge without advertising. If we introduce advertising later, we will explain any new processing and obtain any required consent before it begins. Data obtained through the extension or Google APIs will not be used for advertising or advertising profiling. The Limited Use restrictions above continue to apply if the business model changes.

5. Who receives data

We use the following service providers for the stated purposes: Hetzner for application hosting and self-hosted database, Redis and image-storage infrastructure; Cloudflare for network ingress and encrypted off-host backups; Resend for sending sign-in codes and links, support replies and operational alerts; MXroute for receiving messages sent to MarketRooms email inboxes; Google for Google sign-in when you choose it; PostHog EU for optional, consented product analytics; and ClamAV in our hosting environment to scan uploaded images for malware. PostHog does not receive messages, email addresses, raw symbols or raw room identifiers. Sentry error reporting is not enabled at the date of this policy. Providers may act only under appropriate contractual and confidentiality duties. Other users receive information you intentionally make public, such as your profile and room messages. Data may also be disclosed where required by law or necessary to protect rights and safety.

6. International transfers

Resend stores outbound email content and delivery logs in the United States. Choosing its Ireland sending region does not move that stored data to the European Union. Resend's data processing terms include EU Standard Contractual Clauses and the UK Addendum for these transfers.

Providers may process data outside the United Kingdom or European Economic Area. Where a transfer is restricted by applicable data protection law, we use the relevant adequacy regulations or decision, or appropriate contractual safeguards: the UK International Data Transfer Agreement or UK Addendum for UK transfers, and EU Standard Contractual Clauses for EU transfers, as applicable. We assess the protection provided and apply supplementary measures where required. Contact us for information about the safeguard relevant to a specific provider.

7. How long data is kept

• Account and profile data: while the account is active, then deleted or anonymised following a valid deletion request.
• Magic-link challenges: expire after 15 minutes and become eligible for removal 24 hours later.
• One-time stream tickets: expire after 60 seconds and become eligible for removal 24 hours later.
• Authentication rate-limit records: become eligible for removal 24 hours after their last update.
• Outbound email and delivery logs at Resend: retained for 30 days on our current plan while the account is active; Resend says its backup copies persist for seven days.
• Public messages are hidden when deleted or removed. Deleted message text, earlier versions and available attachment evidence normally become eligible for removal after 90 days. Attachment evidence is encrypted and restricted to authorized staff; access is recorded. Failed storage cleanup is retried and can delay final removal. Copies already downloaded by other people cannot be recalled.
• Reported content, moderation cases, appeals and preservation requests may require longer retention. We review active holds within 90 days and record why continued retention is necessary. A released hold starts a further 90-day removal window. Audit events and limited identifiers can remain after the message content is purged for security, accountability and dispute handling.
• Encrypted recovery backups have a separate 90-day retention window. They are restricted to recovery operations. Removal from the live service does not immediately erase existing backup snapshots; when restoring data, deletion records and retention checks must be applied before reopening access.
• Optional analytics: according to the configured provider retention period. Withdrawal stops future optional collection; it does not automatically erase previously collected records. Contact us to request erasure where applicable. Browser-side identifiers are removed when you clear site or extension data.

8. Account deletion and export

You can download a JSON export from account settings and request deletion on the account deletion page. Deletion anonymises direct account identifiers and removes active relationships and pending sign-in data. Public messages and necessary moderation or audit records may remain under a deleted-user reference for the purposes described above. Removing an account identifier does not necessarily anonymise personal information within a message or image. To request erasure or redaction of that information, contact us with the relevant message or image location. We assess requests under the applicable UK GDPR, EU GDPR or other data protection law, including any lawful retention exceptions, and explain any refusal and your right to complain. Public posting does not waive these rights. We cannot guarantee retrieval of copies independently made by others.

9. Your rights

Subject to applicable UK GDPR, EU GDPR or other data protection law, you may request access, correction, deletion, restriction, portability, or object to processing. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. Email [email protected]. We may need to verify your identity and normally respond within one month.

You may complain to the UK Information Commissioner's Office (ICO) or, where applicable, the data protection authority where you live or work, including in the EEA. You can contact us first to seek a resolution, but this does not limit your right to complain directly.

10. Children

MarketRooms is not intended for children under 18. Do not create an account or submit personal data if you are under 18.

11. Security and changes

We use access controls, limited permissions, encrypted transport, session protections, moderation controls and operational monitoring proportionate to the service. No online service can promise absolute security. Material policy changes will be posted here with a revised date and, where required, brought to your attention in the product.