Privacy Notice

1. Information collected

We collect information needed to create and operate accounts, including email address, sign-in records (a password you set is stored only as a one-way hash, and Google sign-in shares your email address and name), account status, tier, firm or company information when supplied, access-request details, workflow needs, and communication preferences. If you join the access waitlist, we collect only the email address you submit plus basic operational metadata such as the signup page and submission time. If you sign up for our market emails, we collect your email address, the stocks you choose, the page you signed up on and, only if you add it, a mobile number; if you also tick the separate box for text alerts, we record the exact words you agreed to, the time, the page and a one-way hash of your IP address.

The service may also collect operational records such as login events, session metadata, IP address, browser/device information, feature usage, performance reports, audit logs, support messages, and acceptance of legal terms.

2. How information is used

We use this information to authenticate users, manage tiered access, review institutional access requests, protect source licensing, monitor reliability, improve product quality, provide support, prevent abuse, and satisfy contractual or legal obligations. A waitlist email is used to notify you when access becomes available; joining the waitlist does not enroll you in a general marketing newsletter. A market email address receives only the emails you asked for, each with a one-click unsubscribe link. We send no text messages until text alerts launch, and a mobile number is never texted without the separate text consent.

3. Service providers and data handling

MoveSurge may use infrastructure, authentication, payment, analytics, email, logging, market-data, and AI service providers to operate the product. Each provider receives only the data its function needs and processes it on our behalf; none of them owns your account data.

The recipients of personal data are: Cloudflare (hosting network and security, which sees IP address and request details); Stripe (payments: you enter card details on Stripe's own checkout page, so card numbers go to Stripe and never reach us; Stripe receives your email address when you subscribe); Resend (account and billing emails, which receives your email address); Google (Google sign-in if you choose it, website analytics, and advertising measurement: if you arrived from a Google ad and later pay, we report that payment to Google Ads with the ad click identifier); AI providers such as OpenAI and Anthropic, which process market news content to produce summaries, and the text you submit when you use an AI-assisted feature; and WhatsApp (Meta), which carries WhatsApp alerts and the messages you send us (section 3b). We do not sell personal data.

Do not submit confidential portfolio holdings, client personal data, MNPI, or regulated personal data unless your firm has approved that use case in writing.

Approximate IP geolocation (city/country, for security and analytics) is derived locally from the free DB-IP Lite database. IP geolocation by DB-IP.

3a. MoveSurge in ChatGPT and other AI assistants

When you use the MoveSurge plugin or MCP server from ChatGPT or another assistant, the assistant sends us the tool request it needs answered, such as a ticker, a topic or a time window, and we return published market headlines and measured price moves. No sign-in is needed. The assistant does not share your account name or email with us, your full chat history, or the final answer it writes. A tool's search text can contain words from your question. Do not include private information or credentials in market searches. We keep limited request and response details as described below. Our hosting network may also keep standard security logs, including the requesting server's IP address, time and user agent, for up to 90 days.

Optional plugin diagnostics and usage measurement (October 20, 2026)

To find and fix poor results, we save the tool name, time, tool inputs (including search text, tickers and date filters), the market data returned, result counts, error category and response duration. We filter common credentials, contact details and private links before saving. Inputs are limited to 16 KiB and results to 256 KiB; larger records are shortened and marked incomplete. These details are kept for up to 30 days and are available only through restricted operational access.

We also keep daily counts of successful, empty and failed results and the first successful result time for up to 90 days. If the assistant supplies an identifier, we convert it to a server-keyed digest to group repeat use. We do not store the original identifier, request headers, IP addresses or location in these diagnostic records, or link them to website accounts. Requests without an identifier still have diagnostic records and contribute to aggregate call counts, but do not count as people or returning users. We cannot use these identifiers to establish someone's name or verify that they are a trader.

Our hourly maintenance review removes expired records. We use this information to improve service quality and measure repeat use, not for advertising. We do not send it to an external analytics provider. Our infrastructure providers process it only to operate the service.

Every identified tool result includes a personal usage-controls link. Open that link, or ask your assistant to show it, to view recent inputs and daily counts or disable measurement and delete your diagnostic and usage history, including saved responses. No account is required, and the plugin continues working. Only a digest and off setting remain to respect an opt-out; enabling starts a new history. Links expire after 30 days and are renewed with each result. Keep yours private. Earlier aggregate reports contain no identifiers. Clients sending Do Not Track or Global Privacy Control headers are excluded from diagnostics and measurement for those calls.

3b. WhatsApp alerts

WhatsApp alerts start only when you send us a message on WhatsApp, such as "Start MoveSurge alerts". We do not write to a number that has not written to us first.

What we keep: your WhatsApp number and the name WhatsApp shows for it; the messages you send us and the messages and alerts we send you; your alert choices, such as your plan, the headlines you get, pauses and economic data, and your WhatsApp watchlist; and how you signed up: the page or ad you came from, the ad click identifier when there is one, and the MoveSurge account you linked, if any.

Why we keep it: to send the alerts you asked for, to carry out the commands you type, such as STOP, PAUSE or "add Nvidia", to answer your questions, and to see which pages and ads bring subscribers. A message that is not one of the standard commands goes to OpenAI to work out which setting you asked for. OpenAI receives the message text and your WhatsApp watchlist; your number is not sent.

How messages travel: today we send and receive them through WhatsApp Web, signed in to our business number, and we plan to move to Meta's WhatsApp Business API. Either way, WhatsApp (Meta) carries the messages under its own terms and privacy policy. If you signed up after clicking a Google ad, we may report the sign-up to Google Ads with the ad click identifier only; your number and your messages are not sent, and sign-ups from UK, EEA and Swiss numbers are not reported. We do not sell your number or your messages, and we share them only as far as delivering the alerts requires.

How long we keep it, and how to stop: send STOP at any time and the alerts end at once. We keep your number, settings and message history while your alerts are on, and after STOP so that START can switch them back on, until you ask us to delete them. To have them deleted, email [email protected] with your WhatsApp number; we delete them within 30 days and confirm by email.

4. Retention and access controls

Account and access records are retained while needed to provide the service, preserve security/audit logs, resolve disputes, comply with legal obligations, or maintain source-licensing records. Access to operational data is limited to personnel and providers with a business need.

Retention periods: account records are kept while your account is open; when you ask us to close it, we delete or anonymise them within 30 days. Billing and tax records are kept for six years, as UK law requires. Waitlist emails are deleted when you ask to be removed or when the waitlist closes.

Connection and activity logs — including IP address, page views, time on page, on-site actions, and search queries — are retained for up to 90 days for security and product analytics, then automatically deleted. IP addresses flagged for abuse may be kept longer for security blocklisting.

5. Your choices and rights

You can delete your account yourself at any time from /accounts/delete/. Every briefing email carries a one-click unsubscribe link, and you can leave the waitlist by emailing us. Analytics and advertising cookies can be blocked or cleared in your browser settings; the service keeps working without them. One first-party cookie holds a random identifier, with no personal information in it, so we can count returning visits; it is not set on devices whose time zone is in Europe.

You also have the right to ask for a copy of your personal data, to correct it, to have it erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw any consent you gave. Email [email protected] to use any of these rights; we reply within one month. Records we must keep by law, such as billing and tax records, are retained for the periods in section 4. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

6. Contact

For privacy, security, or data-handling questions, contact [email protected].

Data controller: MARKET RECORD LTD. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.