Privacy Policy

ALM DataHub ("we", "us") provides UK actuarial and fixed income market data via almdatahub.com, a REST API, and an Excel add-in. ALM DataHub is a trading name of Genixus Labs Ltd, registered in England and Wales, company number 16720079, which is the data controller for the personal data described here. This policy explains what we hold, why, and what we deliberately don't collect. For anything in this policy, contact support@almdatahub.com.

What we collect

• Account details — your name, email address, and a hash of your password (we use bcrypt; we cannot see your password).
• Billing — payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we store your subscription status and billing history references. Stripe's own privacy policy governs the card data it holds.
• API tokens — stored hashed. For each token we record when it was created and last used, which drives automatic revocation of stale tokens.
• Request metadata — counters used to enforce rate limits, and standard short-lived server logs (IP address, requested URL, timestamp) kept for security and operations.
• Support messages — if you contact support, we receive what you send: your name, email, and message.

What we deliberately don't collect

• No usage telemetry. We do not record which functions you call, which series you pull, or what your workbooks and models do. Your usage patterns are your business.
• No third-party trackers. This site uses no analytics services, no advertising pixels, and no tracking cookies. The only cookie we set is a single first-party session cookie that keeps you signed in.
• No marketing lists. We don't send marketing emails and we never sell or share your details for anyone else's marketing.

The partner programme

If you sign up through a partner's referral link, the referring partner can see three things about your account: your name, whether your subscription is active, and a monthly "active / quiet" indicator showing whether your account has used the service in the last 30 days. They see nothing else — no call volumes, no series accessed, no usage detail. This is stated on the sign-up page for referred accounts; if you prefer the partner to see nothing, sign up through the normal route instead.

How we use your data

To run your account and subscription, deliver the data service, enforce rate limits and prevent abuse, answer support requests, and send service emails (email verification, trial and billing notices, and partner-programme status warnings). Our lawful bases under UK GDPR are the performance of our contract with you and our legitimate interest in keeping the service secure.

Who we share it with

Four processors, no more: Stripe (payments), Hetzner (hosting, in the EU), Cloudflare (bot protection on our public forms — its Turnstile check runs when you submit a form, in place of a traditional CAPTCHA), and our email delivery provider (service and support emails). We share the minimum each needs to do its job. We do not sell personal data.

Retention and deletion

Account data is kept while your account exists. API tokens unused for six months are revoked automatically. Server logs are short-lived and rotate out. To delete your account and its data, email support@almdatahub.com — we'll confirm when it's done. Records we must keep for tax or accounting (invoices) are retained for the legally required period.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict processing, and take your data elsewhere. Email support@almdatahub.com and we'll respond within a month. If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk).

Business transfers

If the business is reorganised — for example, if ALM DataHub moves to a successor company within the same ownership, or the business is sold — your data transfers with it, under this same policy and the same protections. We'd tell you by email before any such change takes effect.

Changes

If this policy changes materially, we'll email account holders before the change takes effect and update the date at the top of this page.