Privacy Policy

FRACCE & Company s.r.o., Company ID 14446260, registered office Horáčkova 1207/9, 140 00 Prague 4, Czech Republic, is the controller of personal data processed through GFWS.app. Contact: gfws@fracce.com.

• Account and authentication data: email address, password credentials handled by our authentication provider, session and sign-in events.
• Profile data you choose to provide: name, company, locale and timezone.
• Scanner requests and their status: the scanner, the listed price snapshot, market category, timeframes, your notes and the review status.
• Legal consent events: the document version accepted, timestamp, source and the page path. No email address and no market activity are stored in this record.
• Contact inquiries: name, email, optional company, inquiry type, message, privacy acknowledgement, optional marketing choice, source page and locale.
• Optional marketing choice for product and availability updates.
• Subscriptions and entitlements where they exist for your account.
• Support and service communications, including alert delivery outcomes for your own account.
• Technical, security and abuse-prevention data: device and browser information, request metadata, error and security logs, rate-limiting records.

For contact-form abuse prevention we store a one-way HMAC hash of the network address used to submit the form. The raw address is not stored in the inquiry record.

• To create and operate your account, handle scanner requests and deliver the service: performance of a contract and pre-contractual steps you request.
• To document accepted terms and risk acknowledgements, maintain an audit trail, and establish, exercise or defend legal claims: our legitimate interests in accountable service operation and legal protection.
• To retain records where a specific accounting, tax or other law requires it: compliance with that legal obligation.
• To keep GFWS secure and reliable — fraud and abuse prevention, rate limiting, incident investigation, support and service integrity: legitimate interests.
• For optional items such as marketing emails and optional external chart content: your consent, which you may withdraw at any time.

• Supabase — EU-hosted database, authentication and serverless functions.
• Lovable and the underlying hosting and content-delivery infrastructure that serves GFWS.app.
• Resend — transactional and contact-notification email.
• TradingView — only when you enable optional external chart content; the chart is then loaded directly from TradingView.

Payment processing is not currently active on GFWS.app. No Stripe or other payment processor handles your data through this site today. Before any paid checkout is enabled, this policy and the checkout disclosures will be updated.

Where personal data is transferred outside the EEA, we rely on applicable safeguards such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with appropriate technical and organisational measures.

We keep personal data for as long as necessary for the purpose it was collected: for the life of your account and the contractual relationship, for the period required by law (including accounting and tax rules), and for as long as needed to establish, exercise or defend legal claims. Security and abuse-prevention records are kept for the shorter period needed for that purpose. We do not promise automated deletion timers that the service does not enforce; you can ask us about a specific record at any time.

We use access controls, row-level database security, encrypted transport, restricted server-side secrets and least-privilege service access. No online service can be absolutely secure, and we do not guarantee that. If a breach affects you and notification is required, we will inform you and the competent authority as the law requires.

You have the right to access your data, correct it, request erasure, request restriction of processing, receive it in a portable form, object to processing based on legitimate interests, and withdraw consent at any time without affecting prior lawful processing.

You may also complain to a supervisory authority. The Czech authority is the Office for Personal Data Protection (ÚOOÚ): https://uoou.gov.cz/en.

Where a U.S. state privacy law applies to you, this section describes our practices in the terms those laws use.

• Categories collected: identifiers (name, email), commercial information (scanner requests and any entitlements), internet and device activity, and inferences we do not currently create for advertising purposes.
• Sources: you, your use of GFWS.app, and our own service and security logs.
• Purposes: providing and securing the service, responding to your requests, meeting legal duties, and optional communications you opt into.
• Recipients: the service providers listed above, and authorities where legally required.
• Rights where applicable: to know and access, correct, delete, obtain a portable copy, opt out of certain processing, and appeal a refused request.
• We may verify your identity proportionately before acting, and authorised agents may act for you with proof of authority.
• We do not discriminate against you for exercising these rights.

GFWS currently does not sell personal information, does not share it for cross-context behavioural advertising, and does not use targeted advertising. We offer no financial incentives for personal data. If these practices ever change, we will update this notice and honour applicable opt-out signals, including Global Privacy Control.

GFWS is intended for adults aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it.

See the cookie and local-storage notice for the exact items GFWS stores in your browser and how to change or withdraw your optional choices.

Email gfws@fracce.com or use the contact form and choose “Privacy request”. Please do not send identity documents or other sensitive material by ordinary email; if verification is needed we will tell you what is proportionate and how to provide it securely.