Privacy Policy

Overview

This Privacy Policy explains how MoatPulse processes personal data when you visitmoatpulse.com, request access to the private beta, or contact us.

MoatPulse is a financial-research product operated from Italy. This notice is intended to provide the information required by Articles 12 and 13 of the EU General Data Protection Regulation (GDPR) and applicable Italian data-protection law.

Data controller

No data protection officer has been appointed because MoatPulse is not currently required to appoint one. Privacy requests should be sent to the address above.

Personal data we process

Private-beta requests

When you submit the beta form, we process your email address, the date and time of your request, your waitlist status, your confirmation of consent, and the version of the privacy information shown at submission. The request is stored in Firebase Firestore. Its security rules allow anonymous visitors only to create a request with these specific fields; they cannot read, change, or delete waitlist records.

Messages you send

If you contact us by email or through a social-media platform, we process the contact details and content you choose to provide, together with the information needed to manage and answer the communication.

Firebase Hosting data

The website is delivered through Firebase Hosting, a Google service. Incoming requests may include IP address, request time, requested resource, browser or user-agent information, and security or diagnostic data. Google states that Firebase Hosting uses incoming IP addresses to detect abuse and provide usage analysis and retains IP data for a few months.

Cloudflare Web Analytics

We use Cloudflare Web Analytics to understand aggregate traffic and real-user performance. Depending on the Cloudflare setup, measurements may be collected through a lightweight JavaScript beacon and Cloudflare edge requests. Available metrics can include page URL without query-string content, referrer, country, browser, operating system, device type, page views, load timing, and Core Web Vitals.

Cloudflare states that Web Analytics does not use cookies or localStorage and does not fingerprint individuals through IP address, user-agent string, or other data for analytics display. Cloudflare provides unsampled beacon data for seven days, stores sampled aggregate data for longer-term use, and currently makes analytics data available for the previous six months.

Purposes and legal bases

Providing an email address for beta access is optional and is not a statutory or contractual requirement. Without it, we cannot place you on the waitlist or contact you about beta access.

Access messages and marketing

A beta-access request authorizes only waitlist administration and messages directly related to beta availability, onboarding, or the status of your request. We will not use that submission alone to send a general newsletter or unrelated promotional communications.

If MoatPulse later offers marketing subscriptions, they will use a separate, optional consent mechanism and an unsubscribe method in every marketing message.

Cookies and similar technologies

The landing website does not currently use advertising cookies, behavioural-profiling cookies, social-media pixels, or cross-site marketing trackers.

Cloudflare Web Analytics does not use cookies or localStorage and, according to Cloudflare, does not fingerprint visitors for analytics. In the current configuration, we therefore do not display a consent banner solely for Cloudflare Web Analytics. If non-essential cookies or other consent-based tracking technologies are introduced, they will be blocked until the required choice is obtained and this policy will be updated.

Service providers and recipients

We may also disclose information where required by law, to protect legal rights or security, or in connection with a business reorganization. We do not sell personal data.

International data transfers

Google and Cloudflare operate international infrastructure and may process data outside the European Economic Area. Where required, transfers are governed by an applicable European Commission adequacy decision, including the EU–US Data Privacy Framework for certified recipients, or by appropriate safeguards such as the European Commission’s Standard Contractual Clauses and supplementary measures.

You may request information about the safeguards relevant to your data by contacting us.

Retention

• Beta waitlist records are kept until access is offered and the related onboarding period is completed, or until you withdraw your request. In any event, an unfulfilled waitlist record will be reviewed and deleted no later than 24 months after submission unless a shorter period is required.
• Direct correspondence is kept only as long as needed to answer, manage the relationship, establish or defend legal claims, and meet legal obligations.
• Firebase Hosting IP data is retained by Google for a few months according to Firebase documentation.
• Cloudflare states that unsampled Web Analytics beacon data is retained for seven days and analytics are available for the previous six months; longer-term data is stored in sampled aggregate form.

Your GDPR rights

Subject to the conditions in applicable law, you may request:

• access to personal data concerning you;
• correction of inaccurate or incomplete data;
• erasure of your personal data;
• restriction of processing;
• data portability where applicable;
• objection to processing based on legitimate interests; and
• withdrawal of consent at any time, without affecting earlier lawful processing.

You also have the right to lodge a complaint with a competent supervisory authority. In Italy, the authority is the Garante per la protezione dei dati personali.

To exercise a right, email[email protected]. We may request information reasonably necessary to verify your identity.

Automated decision-making

The landing website and beta waitlist do not use automated decision-making or profiling that produces legal or similarly significant effects.

Children

MoatPulse is intended for adults and professional users and is not directed to children. We do not knowingly request personal data from children through the landing page or beta waitlist.

Changes to this policy

We may update this policy when the product, providers, processing purposes, or legal requirements change. The current version will be published here with a revised date. Where a change materially affects an existing waitlist member, we will provide an appropriate notice.