PRIVACY POLICY FOR Non Human Technologies OÜ
Last Updated: 21st June 2025
1. Data Controller
Non Human Technologies OÜ (Estonia Reg. No. 17110371) Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551. Email: support @marketmonkeyterminal.com
2. Data We Collect
Category - Specific Data - Purpose
-
Account Data - Email address, hashed password User authentication, account management
-
Service Data - Trading preferences, watchlists, chart settings - Provide contracted services
-
Technical Data - IP address, device type, browser info - Security, fraud prevention, system diagnostics
-
Analytics Data - (Self-hosted Rybbit) - Feature usage, session duration, errors | Platform optimization, troubleshooting
-
Payment Metadata - Transaction status (success/fail), plan type - Billing via Polar.sh *(no card/bank details stored by Non Human Technologies OÜ)
3. Legal Basis for Processing
-
Purpose - Legal Basis (GDPR)
-
Account creation & service delivery - Contractual necessity
-
Payment processing - Legal tax/accounting obligations
-
Security & fraud prevention - Legitimate interests
-
Analytics (Rybbit) - Legitimate interests
4. Data Sharing
- Polar.sh: Payment processor. Receives transaction data but never card/bank details.
- Affiliate Partners: Anonymous tracking via the "Affonso" cookie (e.g., referral conversions).
- Authorities: Only if legally required under Estonian/EU law.
- No sharing with ad networks, data brokers, or third-party analytics services.
5. International Data Transfers
- Primary Storage: All data hosted on EU-based servers.
- Limited Exceptions: Payment data transferred to Polar.sh (US-based) under GDPR-compliant safeguards (Standard Contractual Clauses).
6. Cookies & Tracking
Type - Purpose
-
Essential - Login security, session management
-
Functional - Payment processing (Polar.sh)
-
Affiliate - Anonymous referral tracking
-
Manage preferences via browser settings.
7. Data Retention
Data Type - Retention Period - Reason
-
Inactive user accounts - 3 years - Reactivation window
-
Payment records - 5 years - Estonian tax/accounting laws
-
Analytics (Rybbit) - 3 years - Performance trends
-
Server logs - 3 years - Security/fraud investigations
After retention periods, data is anonymized or deleted.
8. Your Rights (GDPR/EEA)
- Access/Export: Request all personal data via email.
- Correction/Deletion: Update via account dashboard or email request.
- Processing Restriction: Opt out of non-essential processing (e.g., analytics).
- Response Time: 14 days for all requests.
9. Policy Updates
Material changes notified via email 30 days in advance. Continued use = acceptance.
10. Contact
For data requests or concerns:
- Support: support@marketmonkeyterminal.com
Key Features:
- Zero third-party analytics (Rybbit is self-hosted).
- No storage of payment details.
- GDPR-compliant data subject rights workflow.
- Explicit cookie purposes with opt-out guidance.
This policy complies with the EU GDPR and Estonian Data Protection Act.
Effective Date: 21st June 2025