This policy explains what personal data bondScovery collects, why, how long we keep it, and the rights you have over it. We process as little personal data as possible: the bond and issuer data shown in the app relates to companies and governments, not to you. The only personal data we collect is what you choose to send us through our forms, plus a minimal amount of technical data needed to keep the site secure.
The data controller responsible for your personal data is the operator of bondScovery. For any privacy matter — including the rights described below — contact us at [email protected], and we will respond.
| Data | When | Why (purpose) | Lawful basis (GDPR Art. 6) |
|---|---|---|---|
| First name, last name (optional), email, and any message/comment you type | When you submit the early-access waitlist or contact form | To reply to you, or to notify you when STUDIO mode opens | Your consent (Art. 6(1)(a)), given by ticking the box on the form |
| IP address and browser user agent | When you submit a form | To prevent abuse and spam of the form (rate-limiting and security) | Our legitimate interest in protecting the service (Art. 6(1)(f)) |
| IP address, request metadata, and security-challenge data | On every visit, at our infrastructure provider | To deliver the site over a secure connection and block malicious traffic | Our legitimate interest in network and information security (Art. 6(1)(f)) |
| Aggregate, anonymised usage data via Google Analytics (e.g. pages viewed, approximate region, device/browser type) | Only if you accept analytics in the consent banner | To understand overall usage and improve the site — we do not identify you or build behavioural profiles | Your consent (Art. 6(1)(a)), given via the banner; withdrawable at any time |
We do not use advertising cookies, run ads, or build behavioural profiles of you. We use Google Analytics for aggregate, anonymised usage statistics only after you opt in through our consent banner; if you choose "Essential only", no analytics cookies are set and no analytics data is sent.
bondScovery uses essential browser local storage — for example, to remember that you have seen the terms notice, your analytics choice, and to keep your interface preferences. These are strictly necessary for the app to work as you expect and are not used to track you, so no prior consent is required for them.
Separately, if (and only if) you accept analytics in the banner, Google Analytics sets analytics cookies to measure aggregate usage. Until you opt in these are not set (Google Consent Mode defaults analytics storage to denied), and you can withdraw consent at any time by clearing the site's storage in your browser. We set no advertising cookies in any case.
We do not sell or rent your personal data, and we do not share it for anyone else's marketing. We use the following service provider, acting as our processor under contract, strictly to run the service:
We may also disclose data where required by law, or to establish, exercise or defend legal claims.
Some of our providers (including our infrastructure provider and Google) are established in the United States and may process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses (and equivalent safeguards) in the provider's data processing agreement, so your data continues to receive an essentially equivalent level of protection.
Under the GDPR you have the right to:
To exercise any of these, email [email protected]. We will respond within one month. Withdrawing consent is as easy as giving it — just ask and we will remove you.
If you believe we have mishandled your personal data, you can lodge a complaint with your local data protection authority. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it); you may also complain to the authority in your own EU/EEA country of residence.
We protect your data with appropriate technical measures, including TLS encryption in transit, least-privilege database access for the public site, and strict access controls on administrative features.
We may update this policy as the service evolves. We will change the "last updated" date above when we do, and material changes affecting how we use your personal data will be made clear on the site.