← Back to Documentation

🔒 Privacy Policy

How we collect, use, and protect your data

1. Introduction

Liquidator Analytics Platform ("Platform," "we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our Platform at liquidator-indicator.com and related services.

The Platform is operated by Kelly Van Quickelberge, self-employed in Belgium, under the business name Nexus Trading Systems (enterprise number 1042.847.295, VAT BE 1042.847.295), registered office Berlingmolenstraat 12 bus 1, 8850 Ardooie, Belgium. It is a data service and does not give trading or financial advice.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use the Platform.

2. What We Collect

We collect only what we need to run the Platform:

• Account: email address, plan and account status, the date you joined, and your password, stored only as a bcrypt hash (never in readable form).
• Billing: the Stripe subscription reference and payment status. We do not receive or store card numbers.
• Consent record: the plan you chose, the terms version you accepted, your choice on the withdrawal waiver, the time, and a hashed IP address.
• Security and account logs: the time, IP address, browser user agent, and the action (for example a sign-in, sign-up, password reset or payment event).
• Active sessions: the IP address and browser user agent of each signed-in session.
• Password reset tokens: short-lived codes used to reset a password.
• Checkout hold: a hashed IP address and whether a cancellation was recorded for an account from that address in the last 30 days (see section 10).
• Telegram alerts (only if you enable them): your Telegram chat ID, the alert settings you choose, and a log of alerts sent to you.
• Feedback and votes: feedback and votes you submit, linked to your account.
• Waiting list: your name and email address if you joined the early-access list.
• Support emails: what you send us, so we can answer you.

We do not collect exchange API keys or passwords for trading accounts. We do not use third-party analytics or advertising trackers.

3. Why We Use Your Information and the Legal Basis

• Running your account and the service: contract (GDPR Art. 6(1)(b))
• Payments and invoices: contract (6(1)(b)) and legal obligation to keep invoices (6(1)(c))
• Consent record: legal obligation and our legitimate interest in proving what you agreed to (6(1)(c) and 6(1)(f))
• Security, rate limits and fraud prevention: legitimate interest (6(1)(f))
• Checkout hold: legitimate interest in preventing abuse of the cancellation and withdrawal rights (6(1)(f))
• Telegram alerts: contract (6(1)(b)), because you switch them on yourself
• Waiting list: consent (6(1)(a)), because you chose to join
• Support: contract (6(1)(b))

4. Who Receives Your Data

We do not sell your data. We share it only with these providers, and only as needed:

• Stripe (payments): Stripe Payments Europe, Limited (Ireland) for EEA accounts, with Stripe, Inc. (USA) and other Stripe group companies where needed.
• Telegram (only if you enable alerts): alert messages are sent through Telegram to your chat ID.
• Combell (email delivery): sends our account and billing emails (Belgium).
• unpkg (content delivery network): serves the chart library used on the dashboard. When the dashboard loads, unpkg receives your IP address and browser details.
• Hetzner (server hosting): runs the public server in Helsinki, Finland that serves the site. It receives visitors' IP addresses and requests.
• Authorities, when the law requires it.

5. Transfers Outside the EU/EEA

Stripe, Telegram and unpkg may process data outside the EU/EEA, including in the USA. Where they do, we rely on the provider's transfer safeguards, such as the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses. Stripe's data transfer terms are at stripe.com/legal/dta.

6. How Long We Keep Your Data

• Account data: deleted 30 days after your paid period ends.
• Invoices and subscription history: kept until the end of the tenth year after the invoice year, as required by Belgian VAT law (Art. 60).
• Consent records: kept for 3 years after your account ends.
• Security and account logs: kept for 90 days.
• Active sessions: deleted when you sign out, when they expire, or after 7 days without activity.
• Password reset tokens: deleted when they expire.
• Checkout hold: the hold lasts 30 days from the cancellation. The hashed IP record is kept as long as the consent record.
• Telegram data: deleted with your account.
• Waiting list: kept until you ask us to delete it.
• Backups: encrypted copies on our own computer and an external drive. Copies older than 30 days are deleted. Deleted data may remain in backups for up to 30 days after the copy was made.

7. Security

We protect your information with:

• TLS encryption for data in transit
• Passwords stored only as bcrypt hashes
• An encrypted database and encrypted backups
• Session cookies that are HttpOnly, Secure and SameSite=Lax
• IP addresses kept as keyed hashes where we only need to match them (consent record and checkout hold)
• Restricted access to our systems

No system is 100% secure. If you believe your account has been compromised, contact us immediately at nexus2.0.2026@gmail.com.

8. Cookies

We use one essential session cookie (liq_session) to keep you signed in. It is HttpOnly, Secure (sent only over HTTPS) and SameSite=Lax. We do not use analytics, advertising or tracking cookies. If you block cookies in your browser, you will not be able to stay signed in.

9. Your Rights

Under the GDPR you can ask us to:

• give you a copy of your personal data;
• correct inaccurate data;
• delete your data, where the law allows;
• restrict or object to processing;
• give you your data in a portable format;
• withdraw consent, where consent is the basis.

Send requests to nexus2.0.2026@gmail.com with "Privacy Request" in the subject line. We reply within one month.

You may complain to the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit, www.gegevensbeschermingsautoriteit.be), or to the authority in your country.

10. Automated Decisions

We do not make decisions with legal effect about you using automated processing. The checkout hold in section 2 is automated: it can stop a new subscription from starting for 30 days when the same connection was used by an account that cancelled. You can ask us to review it by emailing nexus2.0.2026@gmail.com, and we can release it.

11. Children

The Platform is not for children. Before you pay, you must confirm that you are of legal age to enter into a contract in your country of residence. If we learn that we hold data about a child, we will delete it.

12. Business Customers and Data Processing Agreement

Business customers can ask for a data processing agreement at nexus2.0.2026@gmail.com.

13. Changes to This Policy

We will tell you by email about material changes to this policy.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email: nexus2.0.2026@gmail.com
Company: Nexus Trading Systems (Kelly Van Quickelberge), Berlingmolenstraat 12 bus 1, 8850 Ardooie, Belgium
Enterprise number: 1042.847.295
Website: www.liquidator-indicator.com