Privacy Policy

TELOS ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it.

1. Data We Collect

Account information — When you register, we collect your full name and email address. We store a securely hashed version of your password; your plaintext password is never stored.

Usage data — We may collect information about how you interact with the platform, including pages visited and features used, to improve the Service.

Bookmarks and preferences — Data you save within the platform (such as bookmarked instruments and dashboard preferences) is stored on our servers tied to your account.

Payment data — Subscription payments are handled by a third-party payment processor. We do not receive or store your full card details.

Communications — If you contact us or submit feedback, we retain the content of those communications to respond and improve the Service.

2. How We Use Your Data

• To create and manage your account
• To provide, maintain, and improve the Service
• To process subscription payments
• To send you transactional messages (e.g. account confirmations, billing notices)
• To respond to support requests and feedback
• To detect and prevent fraud or misuse of the platform
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Legal Basis for Processing (UK GDPR)

Where applicable, we process your personal data under the following lawful bases:

• Contract — processing necessary to provide the Service you have subscribed to
• Legitimate interests — improving the Service, preventing fraud, and ensuring platform security
• Legal obligation — where we are required to retain or disclose data by law
• Consent — where you have explicitly agreed (e.g. optional communications)

4. Data Storage and Security

Your data is stored on servers located within the European Economic Area. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

Passwords are hashed using industry-standard algorithms. Authentication tokens are signed and time-limited.

While we take reasonable precautions, no system is entirely secure. Please use a strong, unique password for your account.

5. Local Storage and Cookies

TELOS uses your browser's localStorage to store your authentication token and certain preferences (such as dashboard layout). This data is stored locally on your device and is not transmitted to third parties.

We do not currently use tracking cookies or third-party analytics cookies. If this changes, we will update this policy and provide notice.

6. Third-Party Services

The Service integrates with the following categories of third-party providers:

• Market data providers — to supply real-time and historical financial data
• Payment processors — to handle subscription billing securely
• Hosting infrastructure — our servers run on cloud infrastructure providers

These providers have their own privacy policies and process data only as necessary to deliver their services. We are not responsible for their data practices.

7. Data Retention

We retain your account data for as long as your account is active, plus a reasonable period thereafter in case of disputes or legal requirements. When you delete your account, your personal data is removed within 30 days, except where retention is required by law.

Aggregated, anonymised usage data (with no personally identifiable information) may be retained indefinitely for analytical purposes.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us through the feedback form within your dashboard. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has registered, we will delete their account and associated data promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you via the platform or email. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.