Privacy Policy

1. Who we are

Elite Block Research (“we”, “us”, “our”) operates the website eliteblockresearch.com and the related subscription service. For any privacy-related question, contact us at contact@eliteblockresearch.com.

2. Data we collect

We collect only the minimum data required to provide our service:

• Account data: your name and email address, obtained either directly or via your Google, Microsoft, or GitHub OAuth account when you choose to sign in with one of those providers.
• Subscription data: your membership tier and subscription status. Payment details are handled exclusively by our PCI-compliant payment processor (Whop) — we never store card numbers or banking information.
• Usage data: basic server logs (IP address, browser type, pages visited, timestamps) retained for up to 90 days for security and debugging purposes.
• Cookies: a session cookie necessary for authentication, and an optional analytics cookie (see Section 6).

We do not collect sensitive personal data (health, political opinions, biometric data, etc.).

3. How we use your data

• Authenticating your account and maintaining your session.
• Delivering your subscription content (research reports).
• Sending transactional emails (password reset, subscription confirmation, billing receipts).
• Improving the service through aggregated, anonymised analytics.
• Complying with our legal obligations.

We will never use your email address for marketing unless you explicitly opt in.

4. Legal basis for processing (GDPR)

For users in the European Economic Area, our legal bases are:

• Contractual necessity: to authenticate you and deliver the service you subscribed to.
• Legitimate interests: to maintain server logs for security purposes.
• Consent: for any optional analytics or marketing communications.

5. Data sharing

We never sell, rent, or trade your personal information. We share data only with the following trusted sub-processors, strictly as necessary to operate the service:

• Whop — payment processing
• Resend — transactional email delivery
• Vercel — web hosting and infrastructure
• Google Cloud Platform — backend compute and storage

All sub-processors are contractually bound to protect your data and may not use it for their own purposes.

6. Cookies

• Strictly necessary: a session cookie (“next-auth.session-token”) required for authentication. Cannot be disabled without breaking the service.
• Analytics (optional): anonymous usage statistics to help us improve the platform. You can opt out at any time by contacting us.

7. Data retention

We retain your account data for as long as your account is active. Server logs are deleted after 90 days. If you request account deletion, we will erase your personal data within 30 days, except where we are required to retain it by law.

8. Your rights

Under applicable data protection law (including GDPR), you have the right to:

• Access the personal data we hold about you.
• Rectification of inaccurate data.
• Erasure (“right to be forgotten”) of your account data.
• Restriction of processing in certain circumstances.
• Data portability — receive your data in a machine-readable format.
• Objection to processing based on legitimate interests.
• Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, email contact@eliteblockresearch.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Security

We implement industry-standard technical and organisational measures to protect your data, including TLS encryption in transit, hashed credentials at rest, and access controls limited to authorised personnel. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. International transfers

Our infrastructure is hosted in the United States and European Union. If you are located in the EEA, transfers to the US are covered by Standard Contractual Clauses approved by the European Commission.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email or via a prominent notice on the site. The “Last updated” date below always reflects the current version.