← Back to home

Privacy Policy

Last updated: March 4, 2026

1. Data Controller

Solaksinvest ("we," "us," "our") is the data controller responsible for processing your personal data. We are based in Norway and operate under Norwegian law, the Norwegian Personal Data Act (Personopplysningsloven), and the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

Contact: contact@solaksinvest.com

2. What Data We Collect

We collect the following categories of personal data:

  • Account data: Name, email address, and hashed password when you register with email. If you sign in with Google or X (Twitter), we receive your name, email, and profile picture from the provider.
  • Usage data: Chart configurations, drawings, trade entries, team memberships, and social interactions you create within the platform.
  • Technical data: IP address, browser type, device information, and access timestamps collected automatically via server logs.
  • Communication data: Messages sent through team channels and social features within the platform.

We do not collect financial account credentials, brokerage passwords, or payment card details directly. Payments, if applicable, are processed by third-party providers.

3. Legal Basis for Processing

Under GDPR Article 6, we process your data based on:

  • Contract performance (Art. 6(1)(b)): Processing necessary to provide you with the Solaksinvest platform and its features.
  • Legitimate interest (Art. 6(1)(f)): Platform security, fraud prevention, analytics to improve the service, and technical troubleshooting.
  • Consent (Art. 6(1)(a)): Where you explicitly opt in to optional features such as marketing emails. You may withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)): Where required by Norwegian or EU law.

4. How We Use Your Data

  • Authenticate and maintain your account
  • Provide charting, collaboration, and trading tools
  • Sync your chart state, drawings, and preferences
  • Facilitate team and social features (friend lists, chat, shared charts)
  • Send transactional emails (account confirmation, password reset)
  • Monitor platform stability, security, and performance
  • Comply with legal obligations

5. Data Sharing and Third Parties

We share personal data only when necessary:

  • Supabase (backend & auth): Stores account data and authentication tokens. Supabase processes data under their DPA and GDPR-compliant infrastructure.
  • Google / X (Twitter): Only when you choose to sign in via OAuth. We receive limited profile data; we do not share your platform data back to these providers.
  • Hosting provider: Our server infrastructure provider processes technical data (IP, logs) as a data processor under a DPA.
  • Legal authorities: If required by Norwegian or EU law, court order, or to protect our legal rights.

We do not sell your personal data to third parties. We do not use your data for advertising or profiling for third-party marketing.

6. International Data Transfers

Some of our processors (e.g., Supabase) may store data outside the EEA. In such cases, transfers are protected by EU Standard Contractual Clauses (SCCs) or an adequacy decision by the European Commission, in accordance with GDPR Chapter V.

7. Data Retention

  • Account data: Retained as long as your account is active. Deleted within 30 days of account deletion.
  • Usage data (charts, drawings, trades): Retained as long as your account is active. Deleted upon account deletion.
  • Technical logs: Retained for up to 90 days for security and debugging, then automatically purged.
  • Communication data: Retained as long as the relevant team or social connection exists. Deleted upon account deletion.

8. Your Rights Under GDPR

As a data subject, you have the following rights under GDPR and Norwegian law:

  • Right of access (Art. 15): Request a copy of all personal data we hold about you.
  • Right to rectification (Art. 16): Request correction of inaccurate data.
  • Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten").
  • Right to restrict processing (Art. 18): Request that we limit how we process your data.
  • Right to data portability (Art. 20): Receive your data in a structured, commonly used format.
  • Right to object (Art. 21): Object to processing based on legitimate interest.
  • Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact us at contact@solaksinvest.com. We will respond within 30 days as required by GDPR.

9. Cookies and Local Storage

We use essential cookies and browser local storage for authentication sessions and storing your chart preferences. These are strictly necessary for the platform to function and do not require consent under the ePrivacy Directive (Directive 2002/58/EC) and the Norwegian Electronic Communications Act (Ekomloven).

We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

10. Security

We implement appropriate technical and organizational measures to protect your personal data, including HTTPS encryption in transit, hashed passwords, restricted database access, and regular security reviews. In the event of a data breach that poses a risk to your rights, we will notify the Norwegian Data Protection Authority (Datatilsynet) within 72 hours and inform affected users without undue delay, in accordance with GDPR Articles 33 and 34.

11. Children

Solaksinvest is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data, we will delete it promptly.

12. Supervisory Authority

If you believe our processing of your personal data infringes GDPR, you have the right to lodge a complaint with the Norwegian Data Protection Authority:

Datatilsynet
Postboks 458 Sentrum, 0105 Oslo, Norway
www.datatilsynet.no

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or a notice on the platform. The "Last updated" date at the top indicates the latest revision.

14. Contact

For questions about this Privacy Policy or your personal data, contact:
contact@solaksinvest.com