Privacy Policy

S&C Holding GmbH, Halbgasse 1a, 1070 Vienna, Austria
Managing director Mag. Markus Höfinger · VAT ATU70341613
info@simplywheel.com

• Account data. Your email address, and a name if you give one. Held by Clerk; we see the identifier and the address.
• Your settings. The thresholds you set and the companies you choose to track.
• Broker credentials. The Alpaca API key pair you enter, if you connect an account, and which of the two accounts it reaches.
• What your account holds. Positions, balances and fills, read from your broker to draw the wheel. A cash figure you enter by hand instead is stored as you typed it.
• Technical data. The requests your browser makes, with the usual server log fields, kept briefly by the hosting.

There is no analytics, no advertising identifier and no tracking pixel on SimplyWheel.

To run the service: to authenticate you, to score the market against your filters overnight, to show what your account holds, and to place an order when you press the button for one. Nothing is used to profile you and nothing is sold.

Your API keys are stored so the service can reach your brokerage account on your behalf. They are never shown back to you in full, never sent to anybody else, and never used for anything but the two things above: reading what you hold, and sending an order you asked for.

Disconnecting them in Settings deletes them. Revoking them at Alpaca ends the connection whatever we hold.

Only the processors below, each under a data processing agreement:

Market data comes from Alpaca, Nasdaq and the SEC. Those requests ask about companies, never about you: no personal data leaves the service to reach them.

Everything is encrypted in transit with TLS and at rest in the database, which is hosted in Frankfurt inside the EU. Access is limited to what the service itself needs, and every route but the sign-in pages requires an authenticated session.

• Account data and settings: while the account exists.
• Broker credentials: until you disconnect them, or the account is deleted.
• Scored contracts: replaced every night, and deleted with the account.
• Everything above: removed within 30 days of the account being deleted.
• Prices, chains and company data are about the market rather than about you, and are kept as a market history.

Under the GDPR you have the right of access, rectification, erasure, portability, restriction and objection, and the right to withdraw consent at any time under Article 7(3). Write to info@simplywheel.com and we will answer within one month.

Only the ones the sign-in needs: Clerk sets a session cookie so you stay signed in between pages. There are no analytics or advertising cookies, so there is nothing to consent to and no banner asking you to.

SimplyWheel is not intended for anybody under 16, and we do not knowingly collect their data.

Clerk, Vercel and Alpaca process data in the United States. Those transfers rest on Standard Contractual Clauses and data processing agreements. The database itself does not leave the EU.

Updates are published here with a new date at the top, and anything material is announced by email to the address on the account.

S&C Holding GmbH, Halbgasse 1a, 1070 Vienna, Austria. info@simplywheel.com

You may also complain to the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.