Who handles your information. VAIDUTE & CO. LIMITED, company 16494237, registered office 34 Otterden Street, London, England, SE6 3SJ, United Kingdom, operates GunterChart. Contact support@gunterchart.com about privacy or your information.
Purchases, licences and delivery. We use your delivery email, purchase reference and status to provide your licence and download. The licensing service also keeps installation and cryptographic key identifiers, access-token hashes, timestamps and delivery/recovery records. For eligible Stripe Managed Payments purchases, Sold through Link, LLC acts as merchant of record and handles payment information under its applicable privacy information. Payment receipts and applicable tax documentation are provided through the checkout/payment flow. GunterChart separately handles the licence, download and product support. Our licensing database does not have card-number or full-billing-address fields.
Licence codes and delivery email/content are encrypted in the licensing database; licence and access-token verification also uses protected hashes. The email-delivery service receives the recipient address, licence code, time-limited download link and purchase/setup message so it can deliver the email. Do not send passwords, card details, full licence codes or private trading records to support.
Free trials. Trial registration stores the installation identity, associated public-key information, trial identifier and fixed start/end timestamps to provide seven-day access and recognise repeat requests from the same installation. No payment details or marketing subscription are required. This does not collect your MT5 account password or trading history.
Private support form. The contact form collects your name, email address, subject and message so we can reply. We store these with timestamps, a request reference and notification records in private support tables in our Cloudflare feedback database, separate from public roadmap suggestions. Support messages are never published on the roadmap. Our notification service sends the submitted information to our support mailbox through Resend, using your email as the reply address. Hashed submission identifiers and short-lived hashed rate-limit records help prevent duplicate messages and abuse; the support module does not store raw connection IPs. Your browser keeps a random session token, request reference and content hash for retries, but does not save the message text or email address as a form draft. Submitting a support request does not subscribe you to marketing.
Support and AI assistance. Our support mailbox uses Namecheap Private Email. We use OpenAI's Codex AI assistance to review selected message text, email headers and attachment names/types and help answer technical and sales questions. Routine replies may be sent by our AI assistant; uncertain cases are escalated to the owner/team. Not every reply is individually reviewed by a human. Our local support bridge does not save attachment files or raw email MIME, but selected support content is sent to the AI service: processing is not wholly local. Reusable FAQ content excludes customer identifiers. Please share only the information needed for your question and ask for owner review if preferred. The AI service's applicable account terms and data controls apply; we do not promise that this personal-account support workflow has the business-plan data-processing agreement or no-training-by-default protection.
Why information is used. Purchase, licence and requested support information is used to perform the purchase/access agreement or respond to your request before purchase. Necessary financial/legal records are kept to meet applicable obligations. Proportionate security, rate-limiting, recovery and duplicate-send records support our legitimate interests in protecting accounts, customers and service reliability. Optional ongoing marketing uses a separate choice; an enquiry, purchase or one-time launch-notice request does not automatically subscribe you to campaigns. A withdrawn request must stop further contact within its scope.
Website storage and technical processing. The GunterChart frontend contains no analytics SDK, advertising pixel or application cookie. It uses an essential cryptographic receipt in this tab's session storage to retrieve purchase status; the receipt is not put in the page URL. The roadmap voting feature stores a random browser identifier in local storage to remember votes on this device. Clearing browser storage resets that identifier. Hosted Stripe checkout and service providers have their own processing. Purchase and download requests use no-store/no-referrer protections and omit browser credentials. A download ticket is held in memory for the requested download. The licensing rate limiter derives a short-lived protected key from the connection IP and minute; the application does not store the raw IP in that rate-limit table. These statements do not mean that hosting, security or payment providers keep no technical connection logs.
Roadmap suggestions and votes. We store the feature title and description you submit, moderation status, timestamps and notification records in a separate Cloudflare D1 database. Suggestions are reviewed before publication; approved titles and descriptions are public. Submitted text and a suggestion reference are sent to our support team through Resend for moderation. Votes are associated with protected hashes of the random browser identifier. Short-lived hashed rate-limit records help prevent abuse; this module does not store raw connection IPs. Browser-level votes are not verified individual people. Do not include private account details, balances, licence codes or trading records in a suggestion. We use this information to review requested improvements, manage votes and prevent abuse. Submitting a suggestion or voting does not subscribe you to marketing.
Providers and location. We use Link/Stripe Managed Payments for payments, Resend for transactional licence/download email and roadmap and private support notifications, Cloudflare for website/licensing hosting and storage, and Namecheap Private Email and OpenAI's Codex assistance for support. Link's payment role is separate from our product/licensing role. These providers may process information outside the UK/EEA. Our Resend sending domain uses its Ireland region with TLS enforced; that does not mean all provider processing is restricted to Ireland. Namecheap's published hosting information places Private Email servers in Phoenix, USA. No UK-only storage or processing is promised. Cloudflare, Resend and Namecheap publish processing terms and international-transfer provisions; OpenAI's applicable account terms and privacy information govern its processing. Ask support for information about the arrangements applicable to your data.
Published provider information: Cloudflare processing terms, Resend processing terms, Resend subprocessors, Namecheap Private Email location, Namecheap processing terms. These public terms describe provider services; they do not certify our account configuration or establish a complete transfer assessment.
Retention currently in place. Local support records are minimized when a message is replied to or handled. The bridge's maintenance operation minimizes up to 100 records older than 30 days and removes obsolete SQLite pages; older unresolved cases require manual review. Minimal duplicate/send evidence is retained. This operation does not delete messages from the hosted mailbox. There is no implemented fixed mailbox/audit/consent-record deletion deadline.
In the licensing source, rate-limit records expire after 120 seconds and download tickets have short validity windows; scheduled processing removes expired entries while the service is running. Expiry does not guarantee immediate physical deletion when processing is stopped. Purchase, licence, encrypted delivery, audit and cached-request records do not currently have automatic deletion schedules. Lifetime access needs a minimal continuing entitlement/recovery record, not indefinite retention of every support message. Contact support if you want unnecessary information reviewed or removed; legal duties, access recovery, security and unresolved cases may require some records to be retained.
Private support-form tickets and their notification records do not currently have an automatic deletion deadline. Contact support to request review or removal; unresolved cases, access recovery and legal duties may require some information to be retained.
Roadmap suggestions, votes and notification records do not currently have an automatic deletion deadline. Approved suggestions remain public until removed or changed through moderation. Scheduled feedback processing removes expired rate-limit records. Contact support@gunterchart.com to request review or removal of submitted information; include the suggestion title or reference where available.
Blog comments and newsletter. Comments collect a display name, private email and message for review. Only the approved display name, message and date appear publicly; commenting does not subscribe you to marketing. We email comment notifications to support through Resend. Newsletter signup records the email address, explicit consent wording/version and request/confirmation times in our separate Cloudflare feedback database. A confirmation link expires after 24 hours; you receive newsletters only after confirming. Confirmation emails include an unsubscribe link, and future newsletter emails must include one too. Unsubscribing stops marketing without affecting your licence or requested support. Minimal unsubscribe/consent evidence is retained to respect your choice. Public comments and subscriber records do not currently have automatic deletion deadlines; contact support for review or removal. One-time confirmation-link material is removed from the mail queue after provider acceptance or cancellation. The blog uses an essential random session identifier for submission retries, no advertising tracking, and hashed connection rate limits rather than storing raw IPs in its application tables.
Your choices and rights. Contact support to request access, correction, deletion, restriction, objection or other applicable data-protection rights. We may verify identity and must consider applicable legal duties and continuing access requirements. You can complain to the ICO or your relevant data-protection authority. No marketing campaign is started by this notice, and no unconditional deletion or uninterrupted-service promise is made.