Privacy Policy

Welcome to Verrik. This Privacy Policy explains how we collect, use, store, protect and otherwise process your Personal Data when you visit our website, create an account or use the Verrik Service.

We believe privacy should be transparent, understandable and respectful. We do not sell, rent or trade your Personal Data.

Questions about this Privacy Policy or how we process your Personal Data can be sent to support@verrik.io.

1. Who We Are

Verrik is operated by D Fletcher Trading, a sole trader business established in England, United Kingdom. Throughout this Policy, "Verrik", "we", "our" and "us" refer to D Fletcher Trading trading as Verrik.

2. Information We Collect

The information we collect depends on how you use Verrik, and may include:

• Account information — email address, name, authentication and account settings
• Profile information — trading experience, preferred markets, goals (optional)
• Trading and performance information — journal entries, trade history, notes, tags, review data
• Uploaded files and screenshots you choose to attach to journal entries
• Billing information via Stripe (Verrik never stores full card details)
• Technical information — IP address, browser, device, session and diagnostic data

3. How We Use Your Information

We use your information to:

• Provide, maintain and operate the Service, including your Account and journal data
• Improve Verrik through aggregated or pseudonymised usage analytics
• Manage your subscription, billing and renewals
• Send essential service communications, and — where you've opted in — newsletters
• Protect the Service against fraud, abuse and security incidents
• Comply with our legal obligations

4. Legal Basis for Processing

We process Personal Data under the UK GDPR on the basis of contract performance (providing the Service you've subscribed to), legitimate interests (improving and securing the Service), legal obligations (accounting and regulatory compliance), and consent (for example, newsletters — which you can withdraw at any time).

5. Third-Party Service Providers

Verrik uses a small number of trusted providers to deliver the Service:

• Supabase — authentication, database and storage
• Stripe — subscription payment processing
• Resend — transactional email and newsletters
• PostHog — privacy-conscious product analytics
• Vercel — website hosting

6. Communications

Essential service communications (sign-in, billing, security) cannot be disabled while your Account is active. Newsletters and product updates are optional — you can unsubscribe at any time via the link in those emails, without affecting essential communications.

7. Cookies & Analytics

Verrik uses essential cookies to operate securely, and analytics cookies to understand how the Service is used. Analytics cookies are only set after you provide consent via our cookie banner. Full detail is available in our Cookie Policy.

8. Data Security

We use appropriate technical and organisational measures — encrypted connections, secure infrastructure, role-based access controls and regular security review — to protect your Personal Data. No system can be guaranteed completely secure, and we encourage you to keep your email account secure since it is the basis of Magic Link sign-in.

9. Data Retention

We retain Personal Data only as long as necessary to provide the Service, meet legal obligations and protect our legitimate interests. Full detail — including how to request deletion of your Account — is available in our Data Retention & Account Deletion Policy.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the Personal Data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain processing
• Request a portable copy of your data
• Withdraw consent at any time

To exercise these rights, contact support@verrik.io. If you're in the UK and remain unsatisfied with our response, you can contact the Information Commissioner's Office (ICO).

11. International Data Transfers

Verrik is operated from England. Some trusted providers may process data outside the UK; where this happens, we take reasonable steps to ensure appropriate safeguards are in place.

12. Children's Privacy

Verrik is intended for individuals aged 18 or older. We do not knowingly collect data from anyone under 18.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will update the "Last Updated" date above, and where appropriate we'll notify you by email or through the Service.

14. Contact Us

support@verrik.io
D Fletcher Trading (Sole Trader), trading as Verrik
England, United Kingdom