Your privacy matters to Bull Bear Stock. This policy explains what we collect, how we use it, and your choices. Currently, our platform provides editorial content (blog posts) and accepts voluntary donations. We are developing thread-like posts, comments, and subscription features for real-time ticker data and proposed signals. As new features launch, this policy will be updated to reflect additional data uses.

1. Information We Collect

We may collect:

• Account details (e.g., name, email) if you register or contact us.
• Contact submissions you send via our forms.
• Usage data (device, browser, pages visited) to improve the service.
• Donation data: When you make a donation, we collect your email address, donation amount, optional message, IP address, and timestamp. Payment card information is processed securely by Stripe and is not stored on our servers.

Subscription information (future) will be processed by PCI-compliant providers; we will not store full card numbers.

2. How We Use Your Information

• Provide and improve our website and content.
• Respond to inquiries and provide support.
• Communicate updates, with opt-out options where applicable.
• For donations: Process donations, send donation receipts, prevent fraud, comply with legal obligations (including tax and accounting requirements), and (if you opt in) send newsletter updates.
• Deliver subscription features and notifications (future), per your settings and applicable laws.

3. Payment Processing

We use Stripe (Stripe Payments Europe Ltd.) to process donations securely. Stripe is a PCI DSS Level 1 certified payment processor.

• Data Shared with Stripe: When you make a donation, we share your email address, donation amount, payment information (card details are entered directly in Stripe's secure payment form), and transaction metadata with Stripe to process your payment.
• Stripe's Role: Stripe acts as a Data Processor on our behalf for payment processing. They process your payment information according to their own Privacy Policy and applicable data protection laws.
• Stripe's Privacy Policy: For detailed information about how Stripe handles your payment data, please review Stripe's Privacy Policy.
• We do not store your full credit card number, CVV, or other sensitive payment data on our servers. Payment information is handled exclusively by Stripe.

4. Donation Data

What We Collect:

• Email address (for donation receipts and communication)
• Donation amount and currency
• Optional donation message
• IP address (for fraud prevention and security)
• Timestamp of donation
• Newsletter opt-in preference (if selected)

Why We Collect It:

• Receipts: To send you a donation receipt and confirm your contribution
• Fraud Prevention: To detect and prevent fraudulent transactions and protect our platform
• Compliance: To comply with legal and accounting obligations, including tax reporting requirements under Romanian law
• Support: To assist you with refund requests or donation-related inquiries
• Newsletter (if opted in): To send you updates about our platform and content

How Long We Retain It:

We retain donation data for at least 5 years (and potentially longer) to comply with Romanian tax and accounting requirements. This retention period is necessary for:

• Tax reporting and audits
• Accounting record-keeping requirements
• Legal and regulatory compliance
• Dispute resolution and support

Your Rights:

• Access: You can request a copy of your donation data by contacting us at the email below.
• Correction: You can request corrections to your email address or other personal information.
• Deletion: You may request deletion of your donation data, however, we may be unable to delete certain information due to legal obligations (e.g., tax records must be retained for the required period). We will inform you if deletion is not possible and explain the reason.
• Newsletter Opt-Out: You can withdraw consent for newsletter communications at any time by clicking the unsubscribe link in any newsletter email or contacting us. Note: withdrawing newsletter consent does not affect our processing of donation data for legal compliance purposes.
• Portability: You can request your donation data in a structured, machine-readable format.

5. GDPR Compliance

We comply with the General Data Protection Regulation (GDPR) and Romanian data protection laws as implemented by ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal).

Legal Basis for Processing:

• Contract Performance: Processing donation data is necessary to fulfill our contract with you (processing your donation, sending receipts).
• Legal Obligation: We must retain donation records to comply with Romanian tax, accounting, and regulatory requirements.
• Legitimate Interest: We process data for fraud prevention and security purposes based on our legitimate interest in protecting our platform.
• Consent: We process your email for newsletter communications only if you have provided explicit consent (opted in).

Data Controller: Bull Bear Stock SRL (Romanian Limited Liability Company) is the Data Controller responsible for determining how and why your personal data is processed.

Data Processor: Stripe Payments Europe Ltd. acts as a Data Processor for payment processing. They process payment data on our behalf according to our instructions and their Privacy Policy.

Right to Withdraw Consent: You can withdraw consent for newsletter communications at any time. However, you cannot withdraw consent for processing donation data required for legal compliance (tax records, accounting). Such data must be retained as required by law.

Complaints: If you believe we have not handled your data correctly, you have the right to lodge a complaint with ANSPDCP (Romanian Data Protection Authority) or your local data protection authority.

6. Data Protection

We use reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. Payment processing is secured by Stripe's PCI DSS Level 1 certification.

7. Your Rights

Depending on your jurisdiction (including GDPR rights if applicable), you may have rights to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure (Right to Deletion): Request deletion of your personal data. However, please note that transaction records (amounts, dates, payment IDs) must be retained for at least 5 years to comply with Romanian tax and accounting law. When you request deletion, we will:
  • Anonymize your email address (replace with a hash)
  • Delete optional data (donation messages, newsletter preferences)
  • Retain anonymized transaction data for legal compliance
  You can request deletion by emailing us at stt.forcastt@gmail.com or using our online deletion request form.
• Restriction: Request limitation of processing
• Portability: Receive your data in a structured format
• Object: Object to certain types of processing
• Withdraw Consent: Withdraw consent for newsletter communications (does not affect legal compliance processing)

To exercise any of these rights, please contact us at stt.forcastt@gmail.com. We will respond within one month (or as required by applicable law).

8. Cookies and Tracking

We may use cookies and similar technologies to operate and improve the site. You can control cookies through your browser settings.

Stripe.js Cookies: When you make a donation, Stripe.js (the JavaScript library used for payment processing) may set cookies for fraud prevention and security purposes. These are technical/essential cookies that do not require consent under GDPR as they are necessary for the secure processing of your payment. These cookies are:

• Used solely for fraud prevention and payment security
• Set by Stripe (not by us directly) when you interact with the payment form
• Necessary for the legitimate interest of preventing fraudulent transactions
• Governed by Stripe's Privacy Policy

Future features may use additional tracking to deliver real-time data and notifications, which will be disclosed in updates to this policy.

9. Data Retention

We retain personal information as needed to provide services and for legitimate business or legal purposes:

• Donation Data: Retained for at least 5 years (and potentially longer) to comply with Romanian tax and accounting requirements. This is a legal obligation that cannot be waived. Even if you request deletion, transaction records (amounts, dates, payment IDs) must be retained in anonymized form for compliance purposes. Your email address will be replaced with a hash to anonymize the data while maintaining legal compliance.
• Contact Messages: Retained for support and compliance purposes, typically for 2-3 years or as needed for ongoing support.
• Account Data: Retained while your account is active and for a reasonable period after deactivation for legal and security purposes.
• Usage Data: Retained in aggregated or anonymized form for analytics purposes, typically for up to 2 years.

After the retention period, we will securely delete or anonymize your data, except where legal obligations require continued retention (e.g., tax records).

10. International Transfers

Stripe may transfer payment data to servers outside the European Economic Area (EEA) for processing. Stripe ensures appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Compliance with GDPR requirements for international data transfers
• Adequate data protection measures as detailed in Stripe's Privacy Policy

For other data transfers across borders, we will implement appropriate safeguards consistent with applicable laws, including GDPR.

11. Children's Privacy

Our services are not directed to children under 16 (or as defined by local law). We do not knowingly collect data from children. If you are under 16, please do not use our donation platform or provide us with any personal information.

12. Changes to this Policy

We may update this Policy as features evolve or laws change. We will update the "Last updated" date above and, where required by law (e.g., for material changes affecting GDPR rights), provide additional notice via email or website notification. Material changes affecting how we process donation data will be prominently announced.

14. Contact Us

For questions about this Policy, to exercise your data protection rights, or to report a privacy concern, please contact us:

We aim to respond to all privacy inquiries within one month (or as required by applicable law).