Privacy Policy

1. Controller

Hesvel Global, S.L.U., trading as Stok Terminal, is the controller for personal data processed through this website and the Stok Terminal application (app.stokterminal.com). For privacy questions or to exercise your rights, contact privacy@stokterminal.com. Our full legal details are in the legal notice.

2. Data We Process

Depending on how you use the site and the application, we process these categories of data:

• Account: email address, name, login credentials, language and plan.
• Data you enter in the application: portfolios, transactions, watchlists and preferences.
• Application usage: pages, interactions and errors linked to your account.
• Acceptance of the terms: accepted version, date, IP address and browser.
• Contact and signup data: email address, language, launch-list status and form choices.
• Product research data: optional answers about your current tools, research habits and intended use.
• Billing and subscription data: plan, subscription status, invoices and billing country. Card details are entered during checkout and never reach our systems.
• Technical data: device, browser, page, security challenge and error information needed to operate the site.
• Usage data: pages and interactions, handled according to your consent choices.
• Aggregate measurement: counts of visits and interactions with general details of the visit, designed not to identify you or follow you from one visit to the next.

3. Purposes

• Provide the application: create and manage your account and store your data.
• Analyse how the application is used to improve it and fix errors.
• Keep proof that you accepted the terms.
• Manage the launch list, invitations and launch updates, including their subscription preferences.
• Understand demand for Stok Terminal and improve the website and onboarding funnel.
• Manage subscriptions, billing, invoicing and the related tax and accounting obligations.
• Measure advertising campaigns and attribute conversions, only where the required consent has been given.
• Protect forms, prevent abuse, debug errors and comply with legal obligations.

4. Legal Basis

• Consent: launch-list signup and launch updates, and non-essential analytics or advertising-measurement cookies.
• Performance of a contract: providing the application and the subscription, their support and billing.
• Legitimate interest: security, abuse prevention, debugging, aggregate or minimized audience measurement, usage analytics in the application to improve the service, and proof of acceptance of the terms. You can object to usage analytics in the application by writing to privacy@stokterminal.com.
• Legal obligation: records needed to comply with applicable law.

Launch updates

Each launch update includes a link to unsubscribe or manage your preferences. If you unsubscribe, we stop sending launch updates to that address; you can also contact us using the details above.

5. Analytics and Cookies

We measure how the site is used in aggregate, without cookies or identifiers: we count visits and interactions with its pages together with general details of the visit, such as language, origin (including the ad campaign), device type or approximate country, inferred from the connection without keeping your IP address. The counts are summed on our server before they reach our analytics provider, never include contact details or what you type into forms, and groups with very few visits are hidden, so they cannot identify you or follow you from one visit to the next.

Until you accept optional analytics, no analytics provider starts and nothing is stored on your device for that purpose. Google's tags do load from the start, but without your permission they use no cookie or identifier: they only send signals that do not identify you, which let them measure the performance of our campaigns in aggregate. Once you accept it, we keep the origin of your first visit and of the most recent external source in your browser for 90 days, so that we can connect them to your signup if you go on to sign up.

Optional analytics also records mouse movement, scrolling and clicks, and replays them in order so we can see where people get stuck. What you type is not captured: every form field is masked. Our provider also derives your country from your IP address as the event arrives, and does not keep the address.

In the application, when you are signed in, we record the pages you visit, your interactions and errors, linked to your account, to improve the service and fix problems. We do this on the basis of legitimate interest, and you can object at any time by writing to privacy@stokterminal.com.

Details about the technologies used, the third parties involved and how to withdraw your choice are available in our cookie policy.

6. Recipients and Providers

We use service providers and recipients in these categories:

• Hosting, content delivery, database, backend, communications and security providers needed to operate the website and launch list.
• Anti-abuse and security service providers used to protect forms and prevent fraud.
• Payment and billing providers.
• Error and performance monitoring.
• Analytics and advertising-measurement providers: on the website, according to your consent choices; in the application, for the usage analytics described above.
• Google, as our advertising-measurement provider. Their tags receive only measurement signals that do not identify you, according to your consent choices.
• Professional advisers, public authorities and other recipients where required by law.

7. Retention

Launch-list data is kept for up to 2 years after signup, or until you request deletion. The origin stored in your browser expires after 90 days. Once attached to a signup, advertising click IDs are deleted after 90 days and the rest of the origin after 12 months. Your account data and the data you enter in the application are kept while the account is active. When you close it they are deleted, except what we must keep by law or to handle possible claims, such as proof of acceptance of the terms. Analytics data is kept while it is useful to improve the service and our campaigns. Billing records are kept for the periods required by commercial and tax law, which we cannot shorten on request.

8. International Transfers

Some providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses or equivalent lawful transfer mechanisms.

9. Your Rights

You may request access, rectification, erasure, restriction, objection, portability and withdrawal of consent where applicable. To exercise your rights, email privacy@stokterminal.com.

You may also lodge a complaint with your national data protection authority. In the EU, you can find your authority at edpb.europa.eu.

10. Security and Changes

We use HTTPS, access controls and provider security measures to protect personal data. We may update this policy when the product, providers or legal requirements change. We will notify you of significant changes by email or in the application.