Privacy Policy

• Account data: email, username, display name, profile image, and subscription tier metadata.
• Authentication and session data: session identifiers, IP address, and user-agent data used for security and account access.
• Product usage: watchlists, alerts, and interactions needed to deliver features.
• Communications data: email delivery metadata and optional messaging destinations such as Telegram chat IDs when connected by you.
• Technical analytics: aggregated site performance and usage metrics.

• Brokerage account credentials.
• Portfolio positions, order execution records, or trade PnL.
• Payment card numbers (payments are handled by payment providers).
• Sensitive categories of personal data not needed to run Rebuzz.

We receive information from:

• Data you provide directly (account setup, settings, support).
• Your usage of Rebuzz features and associated device/browser signals.
• Service providers that host, secure, or support the platform.
• Market/community datasets processed for analytics and research outputs.

• Contract performance: to create accounts, authenticate users, and provide core product functionality.
• Legitimate interests: to secure services, prevent abuse, improve reliability, and operate analytics.
• Consent: where required by law for specific processing activities.
• Legal obligations: to comply with applicable law, lawful requests, and enforcement needs.

We share data with service providers only as needed to operate and secure Rebuzz, including:

• Vercel (hosting, edge services, web analytics, Blob storage).
• Neon (managed PostgreSQL database infrastructure).
• Resend (transactional email delivery).
• Telegram (alert delivery when explicitly enabled by you).
• Upstash/Redis (optional caching and session acceleration).
• Market and ingestion providers (for market/community data inputs).

We do not sell personal data and do not share personal data for cross-context behavioral advertising.

We keep personal data only as long as reasonably necessary for product operations, account administration, security, legal obligations, and dispute resolution.

Retention periods vary by data type (for example, session lifecycle, account state, and operational logs). Upon valid deletion requests, we delete or de-identify personal data subject to legal or security retention requirements.

Rebuzz and its service providers may process data in multiple jurisdictions. Where required, we apply contractual and operational safeguards for cross-border transfers.

We use technical and organizational controls designed to protect data, including access controls, audit logging, and infrastructure-level security practices. No method of transmission or storage is guaranteed to be perfectly secure.

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing.

You may submit privacy requests by contacting legal@rebuzz.finance. We may take reasonable steps to verify identity before completing a request.

Rebuzz is not directed to children and is not intended for users below the age required by applicable law to consent to data processing.

We may update this Privacy Policy to reflect legal, operational, or product changes. The updated version becomes effective on posting, with the date shown at the top of this page.