Privacy Policy

Vantis Terminal (“we”, “us”) operates a research, portfolio-tracking, and learning surface for Nigerian retail investors. This page summarises what data we collect, why we collect it, who we share it with, and the controls available to you. We aim to collect the minimum needed to run the product and keep your data on infrastructure we control or trust.

What we collect

• Account data — email address and (optionally) a display name when you sign up through Clerk.
• Operator inputs — positions, watchlist entries, price alerts, journal notes, and any free-text you save inside the terminal. These power the product and are visible only to you.
• Usage analytics — anonymous page views, button clicks, and feature usage via PostHog. Used to understand which surfaces are valuable and which are confusing. You can opt out via the cookie banner.
• Error logs — when something crashes, we capture the error message, stack trace, browser version, and the URL of the page that failed via Sentry and an in-app log table. We deliberately do not capture page contents or form fields.
• Operational signals — IP address, request method, and route are temporarily logged by our hosting provider (Railway) for rate-limiting and abuse detection.

Why we collect it

• Operate the service you signed up for.
• Debug crashes and performance issues.
• Understand product usage so we can prioritise what to build.
• Protect the platform from abuse and bots.
• Notify you about features, alerts you set up, and account changes.

Third parties we use

We process your data on infrastructure provided by the vendors below. Each vendor has its own privacy policy that we reviewed before integrating. We picked vendors with a track record of respecting end-user privacy.

• Clerk — authentication, session management, and account email. Stores your password hash and login history.
• Railway — application hosting. Servers run in the US-West (SFO) region.
• PostHog — product analytics. Stores page views and aggregated usage. Opt-out available via the cookie banner.
• Sentry — error and performance monitoring. Stores stack traces and error metadata; we scrub URL query parameters before forwarding.
• Better Stack — uptime monitoring. Pings our public health endpoint every few minutes; does not handle any operator data.
• LogSnag — operational notifications. Receives signup events and operational alerts so the operator can react to incidents from Telegram.
• EODHD — market data provider. We send no operator-identifying data; only ticker symbols and date ranges for the data we fetch.
• NanoGPT / OpenRouter — AI inference for features like “Ask Vantis” and the operator chat. Your prompts are forwarded to the provider for processing. We do not store provider-side conversation history beyond the duration of the call.

Cookies

We use a small number of cookies, all classified as either essential or analytics.

Essential

Cookies set by Clerk to keep you signed in, and short-lived anti-CSRF tokens set by our middleware. These cannot be disabled without breaking the product.

Analytics

Cookies set by PostHog to attribute usage events to the same anonymous visitor across pages. These can be disabled from the cookie banner shown on your first visit, or by clicking “Essential only” at any time. We do not use marketing or third-party advertising cookies.

Data retention

Operator inputs (positions, journals, alerts) are retained for as long as your account is active and for 90 days after account deletion to allow for accidental-deletion recovery. Analytics and error data are retained per the vendor defaults (PostHog: 7 years for events, 30 days for session replay where enabled; Sentry: 90 days). We can shorten retention on request.

Your rights

• Access — request a copy of the data we hold on your account.
• Correction — update or correct inaccurate data directly in the product or by emailing us.
• Deletion — request that we delete your account and the associated portfolio data. Settings → Account will eventually expose a one-click delete; until that ships, email [email protected] and we'll process the request within 14 days.
• Analytics opt-out — click “Essential only” on the cookie banner, or clear thevantis.consent.analytics key from your browser's localStorage to see the banner again.

Data residency

Our servers and managed dependencies (Railway, Clerk, PostHog, Sentry) are hosted in the United States. By signing up from Nigeria (or anywhere outside the US), you acknowledge that your data will be processed in the US under US data-protection law. We will document a path for in-region hosting once a credible African option becomes available.

Children

Vantis Terminal is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, email us and we will delete the account.

Changes to this policy

Material changes will be announced to registered operators via email at least 30 days in advance of the effective date. Non-material edits (spelling, clarification) are made silently and reflected in the effective date above.

Contact

Privacy questions, data subject requests, or anything you think we missed — [email protected].