Privacy Policy

This Privacy Policy explains what Retail Replay (“we”, “us”) collects when you use the Service, why we collect it, and the choices you have. It should be read with our Terms of Use and Cookie Policy.

1. Who we are

The Service is operated by Retail Replay from Nairobi, Kenya. For privacy requests, email legal@retailreplay.tech.

2. Data we collect

• Account data. Email address, hashed password (handled by our authentication provider), and, if you use Google sign-in, the profile information Google shares with us (typically name, email, and avatar).
• Usage and device data. Basic logs such as IP address, browser type, pages viewed, and error reports. We also record first-party performance metrics (for example page-load timings) to keep the Service reliable.
• Product data you create. Simulated orders, session settings, chart layouts, imported trade files, and similar research data. Much of this stays in your browser (local storage / IndexedDB). Some features may sync files or session metadata to our cloud database and object storage so you can resume work on another device.
• Communications. If you email us, we keep the correspondence as needed to respond.
• Legal acceptance. When you tick an agreement box we store the document version, time, and source (sign-up, sign-in, or in-app gate) in your browser so we can show that you accepted the current Legal Terms.

We do not need, and you should not upload, live brokerage passwords, government ID numbers, or payment-card data unless a future checkout flow expressly asks for them through a payment processor.

3. How we use data

• To create and secure your account and provide the Service.
• To save replay sessions, analytics, and files you ask us to store.
• To diagnose outages, abuse, and bugs.
• To comply with law and enforce our Terms.

We do not sell your personal data.

4. Legal bases

We process personal data under the Kenya Data Protection Act, 2019, and the Data Protection (General) Regulations, 2021. Typical bases are: performance of our contract with you, our legitimate interests in running a secure product, a legal obligation, and, where required, your consent (for example optional marketing). Where GDPR or UK GDPR also applies because you are in the EEA or UK, we rely on the equivalent bases there.

5. Sharing

We share data only with:

• Infrastructure and auth providers that host the Service (for example our database, file storage, and login vendor).
• Professional advisers or authorities if legally required.
• A successor if the Service is transferred, under equivalent protections.

6. Retention

Account data is kept while your account is open and for a reasonable period afterward if needed for security, disputes, or law. Browser-stored research data remains until you clear it or we provide a delete control. Backups age out on a rolling schedule.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. Email legal@retailreplay.tech. You may also complain to the Office of the Data Protection Commissioner in Kenya or to your local data-protection authority.

8. International transfers

We operate from Kenya. We and our processors (including authentication, hosting, and database vendors) may store or process data outside Kenya, including in the United States or the European Union. Where the Kenya Data Protection Act requires it, we use appropriate safeguards for those transfers.

9. Security

We use reasonable technical and organizational measures (encrypted transport, access controls, hashed passwords via our auth provider). No method of transmission or storage is completely secure.

10. Children

The Service is not directed to anyone under 18. We do not knowingly collect data from children.

11. Changes

We will update the “Last updated” date when this policy changes. Continued use after a change means you accept the revised policy.