NOEX

Privacy policy

Last updated: 3 October 2026

This policy explains what personal data we process, why, and what your rights are under the General Data Protection Regulation (GDPR).

Who processes the data

NOEX is a personal project with no company behind it yet. The controller is the project's owner, who can be reached at [email protected] for any privacy matter.

What data we process

  • Waitlist: e-mail, chosen language and where the visit came from (for example the campaign or the referring site).
  • Access questionnaire: your answers about your experience and how you trade.
  • Account: name, e-mail, password (stored hashed), two-factor authentication settings and plan.
  • Trading data you import or record: accounts, trades and notes.
  • Technical data: IP address and access logs, for security and operation.

Why and on what legal basis

  • Waitlist and launch messages: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • Providing your account: performance of a contract (Art. 6(1)(b)).
  • Security, abuse prevention and technical logs: legitimate interest (Art. 6(1)(f)).

Who receives the data

We do not sell personal data. We only use providers acting on our behalf to host the service (server) and send e-mails (access, password, invitations). If one is outside the European Economic Area, the transfer is made with appropriate safeguards such as the European Commission's standard contractual clauses.

How long we keep it

  • Waitlist: until launch and then up to 12 months, or until you withdraw consent.
  • Account and trading data: while the account is active. After a deletion request, it is erased within 30 days.
  • Technical logs: up to 90 days.

Your rights

You can ask for access, rectification, erasure, restriction, portability and objection, and withdraw consent, by writing to [email protected]. We reply within one month.

You can also complain to the Portuguese data protection authority (CNPD): https://www.cnpd.pt

Cookies

We only use strictly necessary storage: the site's language, the login session cookie and app preferences (theme, sidebar). We use no advertising or analytics cookies, so we do not ask for consent. You can delete them in your browser settings.

Security and minors

We use encrypted connections (HTTPS), hashed passwords and optional two-factor authentication. The service is for people aged 18 or over.