Privacy Policy

1. Who we are

This website, compositeman.io (“we”, “us”, “our”), is operated by Compositeman, an independent provider of indicator suites for the TradingView and ATAS charting and trading platforms. This Privacy Policy explains how we collect, use, store, and protect information we receive from visitors and customers (“you”) when you access or make a purchase through compositeman.io.

We are committed to protecting your privacy and handling your personal data in a transparent, responsible manner in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and other relevant national legislation.

2. What information we collect

We collect the absolute minimum amount of information required to process your order and deliver your product. Here is a precise breakdown:

We do not collect names, postal addresses, phone numbers, government identification, or any sensitive personal data directly. We do not build user profiles, track individuals across the web, or store any information beyond what is listed above.

3. How we use your information

Every piece of data we collect serves a single, specific purpose. We do not use your information for anything beyond what is described here:

• TradingView username / ATAS email: Used solely to fulfil your order — i.e., to grant or activate access to the purchased indicator suite on the respective platform. This information is not used for marketing or shared with third parties other than the platform itself as required for fulfilment.
• Payment data: Processed by PayPal or Stripe to complete your transaction. We receive only a transaction confirmation and order amount — no raw payment credentials are ever transmitted to or stored by us.
• Analytics data: Used in aggregate form to understand general traffic patterns, popular pages, and website performance. This data is anonymised and cannot be used to identify you personally.
• Contact form submissions: If you reach out via our contact form, the information you provide (typically a name and email address) is used only to respond to your enquiry.

We do not use any of the above for automated decision-making or profiling, as defined under GDPR Article 22.

4. Legal basis for processing (GDPR)

For visitors in the European Economic Area (EEA), we rely on the following legal bases to process personal data:

• Contract performance (Art. 6(1)(b) GDPR): Processing your TradingView username or ATAS email is necessary to fulfil the contract you enter into when making a purchase.
• Legitimate interests (Art. 6(1)(f) GDPR): We use Google Analytics to better understand how our website is used and to improve it — a legitimate business interest that does not override your fundamental rights and freedoms.
• Consent (Art. 6(1)(a) GDPR): Where applicable, such as optional cookies beyond strictly necessary ones, we will request and rely on your consent.

5. Third-party processors

We work with a small, carefully selected list of third-party services. Each acts as a data processor on our behalf and is bound by their own privacy policies and, where applicable, data processing agreements. These are the only third parties that may receive data in connection with your use of this website:

• PayPal (paypal.com): Payment processing. PayPal may collect and process billing information, email addresses, and transaction data in accordance with their Privacy Statement.
• Stripe (stripe.com): Payment processing. Stripe may collect billing information and device data as described in their Privacy Policy.
• Google Analytics (google.com/analytics): Website analytics. Google Analytics collects anonymised data about your visit, including approximate location, browser type, pages visited, and session duration. You can opt out via the Google Analytics Opt-out Browser Add-on.
• TradingView (tradingview.com): Your TradingView username is shared with TradingView’s platform solely to provision your purchased access. TradingView operates under its own Privacy Policy.
• ATAS (atas.net): Your ATAS login email is shared with the ATAS platform solely to activate your purchased indicators. ATAS operates under its own Privacy Policy.

We do not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Full stop.

6. Cookies

This website uses a minimal set of cookies:

• Strictly necessary cookies: These are set by the checkout process (PayPal / Stripe) and are essential for completing your transaction. They cannot be disabled without preventing the purchase flow from working.
• Analytics cookies: Google Analytics places cookies (such as _ga and _gid) to distinguish unique visitors and track session data. These cookies do not identify you personally.

We do not use advertising cookies, social media tracking cookies, or any form of cross-site retargeting technology. You may manage or delete cookies at any time through your browser settings.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law:

• TradingView username / ATAS email: Retained for the duration of your active subscription or licence, and for a reasonable period thereafter to resolve any disputes or support requests.
• Transaction records: Retained for up to 7 years in accordance with standard financial record-keeping and tax obligations.
• Analytics data: Retained by Google Analytics per their default data retention settings (typically 14 months for user and event data).
• Contact form messages: Retained only for as long as necessary to resolve your enquiry, after which they are deleted.

8. Data security

We take the security of your data seriously. Our website is served over HTTPS (TLS encryption), ensuring that data transmitted between your browser and our servers is encrypted in transit. Payment data is handled entirely by PCI-DSS compliant processors (PayPal and Stripe) and never touches our servers in raw form.

While we apply industry-standard precautions, please be aware that no method of transmission over the internet is 100% secure. In the unlikely event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority as required by law.

9. Your rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data (“right to be forgotten”), subject to our legal retention obligations.
• Right to restriction: Request that we limit how we process your data in certain circumstances.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests, including analytics.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 11. We will respond within 30 days. If you are an EEA resident and believe your rights have been infringed, you may lodge a complaint with your local data protection supervisory authority.

10. International data transfers

Our third-party service providers (Google, Stripe, PayPal) may process your data in countries outside the European Economic Area, including the United States. Where such transfers occur, they are governed by Standard Contractual Clauses approved by the European Commission, or other appropriate transfer mechanisms, ensuring your data receives an equivalent level of protection.

11. Contact us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please get in touch. We take all privacy enquiries seriously and aim to respond promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the “Last updated” date at the top of this page. For material changes, we will make reasonable efforts to notify affected users. Your continued use of compositeman.io after any changes constitutes your acceptance of the revised policy.

We encourage you to review this page periodically to stay informed about how we protect your information.