Privacy Notice
Last updated: 24 July 2026 (beta). This notice explains what NumenEdge collects, why, and your rights over it.
Who we are (data controller)
NumenEdge is a trading brand of IRIS LIMITED, a company registered in England and Wales (company number 17198931), registered office 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. IRIS LIMITED is the data controller for the personal data described here. To exercise your rights or ask a privacy question, use the contact details under Contact below.
Data we collect
- Account data — your email address and authentication details, handled by our authentication and database provider, Supabase, and your plan.
- Payment data — billing handled by our payment processor, Stripe. Stripe processes your card details directly; NumenEdge does not store your full card number.
- Error & security diagnostics — technical error and crash reports, collected via Sentry (configured in the EU region). Used only for reliability and security — not for advertising, and not to build a marketing profile of you.
- Hosting & delivery — the website and API run on Vercel (frontend) and Railway (backend), with rate-limiting via Upstash. These providers process requests, IP addresses, and the data you submit in order to operate and protect the service.
- Transactional email — service emails (sign-in, billing, account notices) are sent through Resend.
- Portfolio & settings you provide — holdings or watchlists you enter, and your preferences.
- Interaction signals for personalisation — how you use the platform (which views and depth you engage with), used to adapt the experience as described under Personalisation below.
Cookies
We use cookies and similar local storage that are strictly necessary to run the service — to keep you signed in, remember your settings (such as your detail-level preference), and protect against abuse. We do not use advertising cookies or sell your data.
Personalisation
NumenEdge adapts how much depth and framing it shows you (for example, an Explore vs a more data-dense Analyst presentation) based on how you use the platform. To do this we log interaction signals and maintain an internal familiarity profile that is refined over time as you engage more — so the experience can grow with you. This profile is used only to fit the presentation to you; it is not a score we show you, not a test, not shared, and never used to decide advice or eligibility. Our lawful basis is our legitimate interest in making the product useful and appropriate to each user. Adapting what you see does not make anything on NumenEdge personal investment advice (see our Terms and Disclaimer). You can object to this personalisation or ask us to reset your profile at any time, and it is deleted when you close your account.
Data region & international transfers
We use service providers in the UK, EU, and US to run NumenEdge. Where personal data is transferred outside the UK or EU, we rely on appropriate safeguards — such as the UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses — with the provider.
Retention
We keep personal data only as long as needed for the purposes above or as required by law, and delete or anonymise it when no longer needed. If you close your account, your account, portfolio, preferences, and personalisation data are deleted after a short grace period; billing and tax records are retained in anonymised form for the period required by law (up to six years) with your identity removed.
Your GDPR rights
If you are in the EU/UK you have the right to access, delete, and export (data portability) your personal data, as well as to rectify it, restrict or object to certain processing, and withdraw consent. You can also request human review of, or an explanation for, an automated personalization decision. To exercise any of these, contact us using the details below. You may also complain to your local data-protection authority.
Sharing
We share data only with the processors that run the service — Supabase (auth/database), Vercel & Railway (hosting), Upstash (rate-limiting), Stripe (payments), Sentry (error diagnostics), and Resend (email) — under appropriate data-processing terms. We do not sell your personal data.
Contact
For any privacy request or to exercise your rights, contact us at privacy@numenedge.ai. You can also complain to the UK Information Commissioner's Office (ICO) or your local data-protection authority.