Privacy Policy
Last updated: March 2026
R2S (Research 2 Signals) is committed to protecting your privacy. We collect only what we need to provide our service and never sell your data to third parties.
1. Who we are
R2S ("we", "us", "our") operates the website and trading signal service at this domain. For privacy questions, contact us at hello@r2signals.com.
2. Data we collect
We collect the following personal data:
- Email address — when you join the waitlist or create an account
- Subscription tier — Starter, Researcher, or Quant
- Payment information — processed by Stripe; we never store card details
- Usage data — pages visited, signals viewed (via Supabase analytics)
We do not collect: your name, phone number, address, or any financial portfolio data.
3. Legal basis for processing (GDPR)
We process your data on the following legal bases:
- Consent — when you join the waitlist or create an account
- Contract performance — to deliver the service you subscribed to
- Legitimate interest — to improve our service and prevent fraud
4. How we use your data
- To deliver trading signals and notifications by email
- To manage your subscription and billing
- To send service-related communications (signal updates, account notices)
- To improve our platform and strategies
We do not use your data for advertising or sell it to third parties.
5. Third parties we use
- Supabase (supabase.com) — database and authentication. Data stored in EU region.
- Stripe (stripe.com) — payment processing. Subject to Stripe's privacy policy.
- Resend (resend.com) — transactional email delivery.
- Netlify (netlify.com) — website hosting.
6. Data retention
We retain your email address and subscription data for as long as you have an account. If you delete your account or unsubscribe, we delete your data within 30 days, except where required by law (e.g., financial records for tax purposes — retained for 7 years).
7. Your rights (GDPR)
As an EU resident, you have the right to:
- Access — request a copy of all data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Withdrawal of consent — unsubscribe at any time via the link in any email
To exercise these rights, email hello@r2signals.com.
8. Cookies
We use only functional cookies necessary for authentication (Supabase session token). We do not use advertising, tracking, or analytics cookies.
9. Security
Your data is stored in a secured Supabase database with row-level security (RLS) enabled. All connections are encrypted via HTTPS/TLS. We do not store passwords — authentication is via magic links sent to your email.
10. Changes to this policy
We may update this policy as our service evolves. Material changes will be communicated by email to active subscribers.