MacroFlow ("we", "us") is the data controller responsible for your personal data collected through macroflow.capital. This policy describes how we collect, use, store, and protect your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection law.
Contact: hello@macroflow.capital
Account data: Email address when you create an account. MacroFlow uses email-only authentication — no passwords are stored or transmitted.
Payment data: Payment is processed by Stripe, Inc. MacroFlow does not store credit card numbers, IBAN details, or other sensitive payment information. We receive a subscription status token from Stripe confirming successful payment.
Telegram data: If you connect Telegram alerts (Elite plan), we store your Telegram chat ID to deliver notifications. We do not read your Telegram messages.
Usage data: We may collect anonymized usage analytics (pages visited, features used) to improve the Service. This data cannot be used to identify you individually.
Technical data: IP address (for security and fraud prevention), browser type, and device information collected automatically via server logs. Logs are retained for 30 days.
We do not sell, rent, or trade your personal data to any third party for marketing purposes.
We share your data only with the following trusted processors, each bound by GDPR-compliant data processing agreements:
We do not share your data with any other third parties except where required by law (e.g., court order, regulatory request).
As a data subject under the GDPR, you have the following rights:
To exercise any of these rights, email hello@macroflow.capital. We will respond within 30 days.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for MacroFlow is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestr. 2–4, 40213 Düsseldorf, Deutschland · poststelle@ldi.nrw.de · www.ldi.nrw.de
MacroFlow uses functional cookies and localStorage strictly necessary to operate the Service (session state, authentication tokens) — these are always active. For non-essential analytics and advertising tools (Microsoft Clarity and the Meta Pixel) we ask for your explicit consent via a cookie banner on your first visit; these load only if you click Accept. You can decline, and you can change your choice anytime by clearing your browser storage. Legal basis: Art. 6(1)(a) GDPR (consent) and § 25(1) TTDSG.
We use localStorage to store your authentication session token (your email address and plan type) for up to 30 days. This data is stored locally in your browser and is not transmitted to our servers except when verifying your subscription with our API. You can clear it at any time by signing out or clearing your browser storage.
Third-party font requests: When you load macroflow.capital, your browser retrieves web fonts from fonts.googleapis.com and fonts.gstatic.com (Google LLC, USA). In the process, your IP address and browser metadata are transmitted to Google servers in the USA. No cookies are set by this provider. All JavaScript libraries (including React) are served directly from our own server. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in reliable, consistent font delivery for performance and rendering.
MacroFlow uses TLS encryption (HTTPS) for all data in transit. MacroFlow uses email-only authentication — no passwords are stored. Access to production systems is restricted to authorized personnel only. We conduct regular security reviews.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and the relevant supervisory authority within 72 hours as required by GDPR Art. 33–34.
Your data may be processed by our service providers outside the European Economic Area. The following providers may process data in third countries (primarily the USA):
In all cases, appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions) in accordance with GDPR Chapter V. You may request a copy of the applicable safeguards by emailing hello@macroflow.capital.
We may update this Privacy Policy from time to time. Material changes will be communicated to registered users via email at least 14 days before taking effect. The current version is always available at macroflow.capital/#privacy.
For all data protection inquiries: hello@macroflow.capital
Response time: within 3 business days for general inquiries, within 30 days for formal GDPR requests.