Privacy Policy

Last updated: March 30, 2026

1. Data Controller

MetalPredict is operated from Spain under European Union data protection regulations (GDPR). For privacy inquiries, contact us at soporte@metalpredict.com.

2. Data We Collect

We collect the following personal data:

Account data: Name, email address, and password (encrypted) when you register
Payment data: Processed securely by Stripe. We do not store credit card numbers on our servers
Usage data: Pages visited, features used, and prediction views for service improvement
Communication data: Emails and messages you send to our support team

3. How We Use Your Data

To provide and maintain the Service
To process payments through Stripe
To send prediction alerts and service notifications
To improve our AI models and service quality
To respond to support requests

We do NOT sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis (GDPR)

Contract performance: Processing necessary to provide the Service you subscribed to
Legitimate interest: Service improvement and security
Consent: Marketing communications (you can opt out at any time)

5. Payment Processing

All payments are processed by Stripe, a PCI DSS Level 1 certified payment processor. Your credit card information is sent directly to Stripe and never touches our servers. Please review Stripe's Privacy Policy for details on their data handling.

6. Data Retention

We retain your account data for as long as your account is active. After account deletion, personal data is removed within 30 days. Payment records are retained as required by tax and accounting regulations (minimum 5 years under Spanish law).

7. Your Rights (GDPR)

Under the GDPR, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Portability: Receive your data in a machine-readable format
Object: Object to processing based on legitimate interest
Withdraw consent: Withdraw consent for marketing communications at any time

To exercise any of these rights, email soporte@metalpredict.com. We will respond within 30 days.

8. Cookies

We use essential cookies for authentication and session management. These are strictly necessary for the Service to function and do not require consent. We do not use advertising or tracking cookies from third parties.

9. Data Security

We implement industry-standard security measures including SSL/TLS encryption, encrypted password storage (bcrypt), and secure server infrastructure. However, no method of electronic transmission is 100% secure.

10. International Transfers

Your data is stored on servers in Germany (Hetzner). Payment data is processed by Stripe, which may transfer data to the United States under appropriate safeguards (Standard Contractual Clauses).

11. Children

MetalPredict is not intended for users under 18 years of age. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this policy periodically. Changes will be posted on this page with an updated date. Continued use of the Service constitutes acceptance of the updated policy.

13. Contact

For privacy questions or to exercise your GDPR rights:
Email: soporte@metalpredict.com
Website: metalpredict.com