Privacy Policy

Stage Strategy GmbH, a limited liability company registered in Mölln, Germany, operates bikenzo.com and is the controller of the personal data described in this policy.

We deliberately collect as little as the Service can function on:

• Account data — your email address, a securely hashed form of your password (we never store the password itself), and the date and version of the disclaimer you accepted at signup.
• Subscription data — your Stripe customer and subscription identifiers, plan, subscription status, billing period and committed term dates.
• Technical data — standard server and hosting logs generated when you use the Service, such as IP address, timestamps, and user agent.

We do not collect or store your card details. Card data is entered on Stripe’s hosted checkout page and is held by Stripe. We receive only identifiers and subscription status from Stripe, never a card number.

We do not sell your personal data, and we do not use it for advertising or share it with data brokers.

• To create and secure your account and authenticate your sessions.
• To take payment and determine whether your subscription grants access to the terminal.
• To provide support and to send service messages about your subscription.
• To keep a record that you accepted the mandatory disclaimer, and when.
• To keep the Service secure, prevent abuse, and comply with our legal obligations.

Where the GDPR or similar law applies to you, our legal bases are: performance of our contract with you (account, access, payment), our legitimate interests (security, abuse prevention), and compliance with legal obligations (financial records).

We share data only with processors who help us run the Service:

• Stripe, Inc. — payment processing and subscription management.
• Our hosting and database providers — to run the application and store account data.

We may disclose data where required by law, or to establish, exercise, or defend legal claims.

Our upstream market data sources (such as FRED and public cryptocurrency price APIs) are queried by our servers, not by your browser. Those requests carry no information about you.

We use a single strictly necessary cookie to hold your signed-in session. It is httpOnly and cannot be read by scripts. Without it you cannot stay logged in. We do not use advertising, tracking, or third-party analytics cookies.

We are based in Germany. Some of our providers (for example our payment and hosting providers) may process data in the United States and elsewhere. Where required, such transfers rely on appropriate safeguards such as the European Commission’s standard contractual clauses or an adequacy decision.

We keep account data for as long as your account exists. After you close your account, we keep the minimum necessary to meet legal, tax, and accounting obligations — typically billing records and proof of disclaimer acceptance — and delete the rest.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know and to delete; we do not sell or share personal information as those terms are defined there.

To exercise any right, email office@bikenzo.com. We will respond within the period required by applicable law. You may also complain to your local data protection authority.

Passwords are hashed with bcrypt and never stored in plain text. Sessions use signed, httpOnly cookies transmitted over HTTPS. Access to the terminal is checked against our database on every request. No system is perfectly secure, and we cannot guarantee absolute security.

The Service is not directed at anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy. Material changes will be notified by email or in the Service before they take effect.

Stage Strategy GmbH, Mölln, Germany. office@bikenzo.com