Privacy Policy

Last updated: 1 June 2026

This Privacy Policy explains how Alpha Flux Limited ("Alpha Flux", "we", "us", "our"), the operator of FlowState Pro (the "Service"), collects, uses, and protects your personal data. We are committed to handling your data responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) where applicable, and the Data Protection Act 2018.

1. Data Controller

The data controller for the Service is:

Alpha Flux Limited 71-75 SHELTON STREET COVENT GARDEN LONDON WC2H 9JQ United Kingdom Company No. 16988236

Contact: hello@traderstackhq.com

2. Information We Collect

2.1 Account Information

When you register for the Service, we collect:

• Email address
• Name (if provided)
• Authentication credentials (managed through Clerk, our authentication provider)

2.2 Subscription and Payment Information

If you subscribe to the Service, our payment processor (Stripe) collects:

• Payment card details (we do not store full card numbers; Stripe handles this)
• Billing address
• Transaction history

We receive limited transaction metadata from Stripe (subscription status, payment success/failure, last 4 digits of card for support purposes).

2.3 Usage Data

We automatically collect technical information about your use of the Service:

• IP address
• Browser type and version
• Device information
• Pages accessed and features used
• Timestamps of actions
• Error logs

2.4 Communications

If you contact us, we retain records of those communications (emails, support messages).

2.5 Cookies and Tracking

The Service uses cookies and similar technologies for:

• Authentication (keeping you signed in)
• Preferences (remembering your settings)
• Analytics (understanding how the Service is used)

You can control cookies through your browser settings. See section 9 for more on cookies.

3. How We Use Your Information

We use your data for the following purposes:

3.1 Providing the Service

• Authenticating your access to your account
• Delivering subscription features
• Processing payments
• Sending transactional emails (welcome, billing receipts, trial reminders, password resets)

Legal basis: Performance of a contract with you.

3.2 Service Improvement and Analytics

• Understanding how users interact with the Service
• Identifying bugs and performance issues
• Improving features and user experience

Legal basis: Legitimate interest in improving the Service.

3.3 Communications

• Responding to your support requests
• Sending important Service updates (e.g., policy changes, security notices)
• With your consent, sending product updates and marketing emails

Legal basis: Performance of a contract (for support and Service updates); consent (for marketing).

3.4 Legal and Compliance

• Complying with legal obligations
• Enforcing our Terms of Service
• Detecting and preventing fraud or abuse

Legal basis: Legal obligation; legitimate interest in protecting the Service.

4. How We Share Your Information

We do not sell your personal data. We share data only with the following categories of recipients, for the purposes described:

4.1 Service Providers

We use third-party services to operate the Service. These providers process your data on our behalf under data processing agreements:

• Clerk — Authentication and user management
• Stripe — Payment processing and subscription management
• Resend — Transactional email delivery
• Cloudflare — DNS, email routing, security infrastructure
• Hosting providers — Server infrastructure

Each of these processors has access only to the data necessary to provide their service.

4.2 Legal Requirements

We may disclose your data if required by law, court order, or governmental authority, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Protect the rights, property, or safety of users or others
• Investigate or prevent fraud or illegal activity

4.3 Business Transfers

If Alpha Flux Limited is acquired by, merges with, or sells assets to another entity, your data may be transferred as part of that transaction. You will be notified of any such transfer.

4.4 Aggregated and Anonymised Data

We may share aggregated, anonymised data that cannot identify you individually for analytics, research, or marketing purposes.

5. International Data Transfers

Some of our service providers are based outside the UK or EU. Where data is transferred outside the UK/EU, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the UK ICO or European Commission
• Service providers in countries with adequacy decisions

For specific information about where each provider processes data, see their individual privacy policies linked above.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specific retention periods:

• Account information: retained while your account is active; deleted within 30 days of account deletion (except where required by law)
• Subscription and payment records: retained for 7 years after the last transaction (for tax and accounting compliance)
• Usage logs: retained for up to 12 months
• Support communications: retained for up to 2 years after resolution

You may request deletion of your data at any time (see section 7).

7. Your Rights

Under UK GDPR and EU GDPR (where applicable), you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Ask us to limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain types of processing (including direct marketing)
• Withdraw consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, contact us at hello@traderstackhq.com. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Tel: 0303 123 1113 ico.org.uk

If you are in the EU, you can complain to your local data protection authority.

8. Security

We implement reasonable technical and organisational measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted password storage (via Clerk)
• Access controls and authentication
• Regular security reviews
• Use of established, reputable third-party processors

No system is completely secure. If you believe your account has been compromised, contact us immediately.

9. Cookies

The Service uses the following types of cookies:

• Essential cookies: Required for authentication and basic functionality. Cannot be disabled.
• Functional cookies: Remember your preferences and settings.
• Analytics cookies: Help us understand how the Service is used (where applicable).

You can manage cookies through your browser settings. Disabling essential cookies will prevent the Service from functioning properly.

10. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect data from individuals under 18. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on the Service. The "Last updated" date at the top of this policy reflects the most recent version.

12. Contact

For privacy questions or to exercise your rights, contact:

Email: hello@traderstackhq.com

Alpha Flux Limited 71-75 SHELTON STREET COVENT GARDEN LONDON WC2H 9JQ United Kingdom

Company No. 16988236