Privacy policy

How Vibros Ltd collects, uses and protects personal data on xrimatistirio.com.

Effective 21 September 2026 · Η σελίδα αυτή είναι διαθέσιμη μόνο στα αγγλικά.

1. Who we are

Vibros Ltd (registration HE 489995), Strovolos, Nicosia, Cyprus (“Vibros”, “we”) operates xrimatistirio.com and is the data controller for personal data collected through it. Contact: questions@vibros.ai.

2. What we collect

You can read the market dashboard, every stock page and every company profile without an account and without giving us any personal data.

Account. If you sign in with Google we receive your name, email address, profile picture and Google account identifier. If you sign in by email we store your email address and a short-lived, hashed six-digit code that expires after ten minutes.
What you save. Your watchlist, whether you marked a stock as held, the view (positive, neutral, negative) you set on it, and the preferences you chose yourself: experience level, horizon, interests, sectors, device and notification choices.
How you use the site while signed in. Short records such as “viewed a stock”, “changed the chart range” or “set a view”, used so MENTOR and the beta questions can adapt to you.
MENTOR questions. The question you ask, the answer, the page you asked from and technical details of the request (time, cost, status). Signed-in questions are linked to your account; anonymous questions are linked only to a salted hash of your IP address and browser type, which we use for rate limiting and cannot turn back into an address.
Beta programme. What you write, the option you tap, the page you were on, the figure you flagged, your screen size and browser type, and the profile answers you chose to give. We do not record your screen, your keystrokes or your session.
Server logs. Our hosting provider records technical data such as IP address, browser type and request time for security and reliability.

We do not ask for, and the site has no place to enter, brokerage credentials, holdings sizes or payment card numbers.

3. Cookies and local storage

xr_s — a sign-in session cookie, set only when you sign in, HttpOnly, valid for 30 days and renewed while you use the site. We store only a hash of its value.
locale — remembers your language choice.
Local storage — if you star stocks without an account, that list lives only in your browser; when you sign in it is merged into your account and removed from the browser.

We use no advertising or cross-site tracking cookies. Audience measurement is done with Vercel Web Analytics, which counts page views without cookies and without identifying visitors.

4. Why we use it, and on what basis

To provide the account features you asked for — sign-in, watchlist, preferences, MENTOR history (GDPR Art. 6(1)(b)).
To run the beta programme you joined, including asking short questions and following up on the reports you send (Art. 6(1)(b) and our legitimate interest, Art. 6(1)(f)).
To keep the service secure, prevent abuse and control the cost of MENTOR (legitimate interest, Art. 6(1)(f)).
To understand in aggregate which pages are useful and to fix wrong numbers (legitimate interest, Art. 6(1)(f)).
To send you product updates only where you opted in; you can switch them off at any time on the beta page or by writing to us (consent, Art. 6(1)(a)).

We do not sell personal data, we do not use it for advertising, and we make no automated decisions with legal or similarly significant effects. The view you set on a stock is private: it is never shown to other users and never published.

5. Who processes it for us

We use the following processors under written data-processing terms: Vercel (hosting, serverless functions and analytics), Neon (database), Resend (sign-in and service email), Google (sign-in, if you choose it) and Anthropic (the AI model behind MENTOR — your question and the context needed to answer it, which for signed-in members can include your watchlist, the views you set and your preferences, are sent to Anthropic to generate the answer; we do not send your name or email address). When paid plans open, payments will be handled by Stripe; card details go to Stripe directly and never reach our servers.

Where a processor stores data outside the European Economic Area, transfers are protected by the European Commission’s Standard Contractual Clauses.

6. How long we keep it

Account data is kept for as long as you have an account. You can delete your account at any time from the account page: this removes your profile, sessions, watchlist, preferences, usage records and beta data at once, and detaches your past MENTOR questions from you so they remain only in anonymous form.

Anonymous MENTOR logs and beta reports are kept for as long as they are needed to operate, secure and improve the service, and beta-programme data for the duration of the programme plus 12 months, unless you ask us to delete it sooner or the law requires a longer period.

7. Your rights

Under the GDPR you may ask us to access, correct, delete or restrict the personal data we hold about you, object to our processing, withdraw a consent you gave, or receive your data in a portable format. Write to questions@vibros.ai and we will respond within one month. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, or with the authority in your country of residence.

8. Changes

We will post any changes to this policy on this page and update the effective date above. See also the terms of use.