Privacy Policy
Last updated: July 1, 2026
This Privacy Policy explains how Veko ("Veko", "we", "us") collects, uses, and protects your personal data when you use useveko.com (the "Service"), and describes your rights under the EU General Data Protection Regulation (GDPR) and equivalent EU/EEA law. It should be read together with our Terms of Service.
Contents
1. Who is responsible for your data
The data controller for the Service is the operator of Veko, an individual sole trader established in the European Union / European Economic Area, trading as "Veko Financial Technologies". For any privacy question or to exercise your rights, contact us at [email protected].
2. Data we collect
Data you provide
- Account data — your email address, username, and password (stored only as a salted hash, never in plain text).
- Billing data — when you subscribe to Pro, your payment is processed by Stripe. We do not receive or store your full card number; we store a Stripe customer/subscription identifier, your subscription status, and the billing email associated with it.
- Content you create — portfolio holdings and transactions, watchlists, saved reports, and research notes you enter.
- Correspondence — messages you send us by email.
Data collected automatically
- Authentication & security data — login timestamps and IP address, used to secure your account and rate-limit failed sign-in attempts.
- Usage data — basic records of which companies you view or compare, so the Service can show recent activity.
- Technical data — cookies and standard server logs (see Cookies).
3. How and why we use your data
- To create and operate your account and provide the Service.
- To process Pro subscriptions, renewals, and related billing.
- To send transactional emails (email verification, password reset, and important service or billing notices).
- To secure the Service, prevent abuse, and troubleshoot problems.
- To comply with legal obligations, including accounting and tax record-keeping for payments.
We do not sell your personal data, and we do not use it for third-party advertising.
4. Legal bases for processing
Under the GDPR we rely on the following legal bases:
- Performance of a contract (Art. 6(1)(b)) — to provide the Service and manage your subscription under our Terms.
- Legitimate interests (Art. 6(1)(f)) — to keep the Service secure, prevent fraud and abuse, and maintain and improve it, balanced against your rights.
- Legal obligation (Art. 6(1)(c)) — to retain billing and tax records as required by law.
- Consent (Art. 6(1)(a)) — where we specifically ask for it; you may withdraw consent at any time.
5. Cookies
We use a small number of cookies that are strictly necessary to run the Service, plus a preference cookie:
- Session cookie — keeps you logged in.
- CSRF cookie — protects forms against cross-site request forgery.
- Theme preference — remembers your light/dark choice.
We do not use advertising or cross-site tracking cookies. Some embedded third-party components — such as the charting widget on company pages — may set their own cookies or receive your IP address when they load; these are governed by the relevant provider's privacy policy.
6. Who we share data with
We share personal data only with service providers ("processors") that help us operate the Service, and only as needed:
- Stripe — payment processing and subscription management.
- Our email provider — to deliver transactional emails.
- Our hosting/infrastructure — to run and store the Service.
We may also disclose data where required by law, to enforce our Terms, or to protect the rights, safety, and security of our users and the Service. We do not send your personal data to the SEC or market-data sources — those connections carry only company identifiers, not information about you.
7. International data transfers
Some of our processors (for example, Stripe) may process data outside the EU/EEA, including in the United States. Where that happens, the transfer is protected by appropriate safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy mechanism (for example, the EU–US Data Privacy Framework).
8. How long we keep your data
We keep your account data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep certain records longer to meet legal obligations — in particular, billing and tax records, which are retained for the statutory period required in the relevant jurisdiction.
9. Your rights
Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected (rectification);
- have your data deleted (erasure);
- restrict or object to certain processing;
- receive your data in a portable format (data portability);
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with your local data-protection supervisory authority if you believe we have not handled your data lawfully.
10. Security
We take reasonable technical and organisational measures to protect your data, including encrypted transport (HTTPS), hashed passwords, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond appropriately to any incident.
11. Children
The Service is not directed to children and is intended only for users aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
13. Contact
Questions about this Privacy Policy or your personal data? Contact us at [email protected].