Resonanz X-Ray privacy notice
Effective date: [[EFFECTIVE_DATE]]
This notice explains how Resonanz Capital GmbH handles personal information when you use Resonanz X-Ray or contact us about it. It also explains which parts of your interaction are handled by your chosen AI platform.
X-Ray is intended for business use. Business contact details and information about individual users are still personal information covered by this notice.
Who is responsible
Resonanz Capital GmbH, Eschersheimer Landstr. 50–54, 60322 Frankfurt am Main, Germany, is responsible for the processing described in this notice, subject to the arrangements for customer-provided personal data below.
Contact info@resonanzcapital.com, using the subject “Resonanz X-Ray privacy request”.
[[DPO_OR_PRIVACY_REPRESENTATIVE_DETAILS_IF_APPLICABLE]]
Information we process
| Category | Examples and purpose |
|---|---|
| Account information | Your verified email, sign-in identifier, account status and records of account changes, used to provide and secure access. |
| Analysis inputs | Investment names, dates, valuations, returns, currencies, allocations and other information you send to the analysis tools. These may contain personal information if you include it. |
| Working results | Prepared datasets, requested edits and calculated results needed to answer your questions and continue an analysis. |
| Service records | Request references, operation types, timings, outcomes and security records used to operate and troubleshoot the service. |
| Support correspondence | Your contact details and the information you choose to send when requesting help. |
| Website information | Information collected when you visit these pages or submit a website form, as described in the website privacy and cookie information below. |
Sign-in is provided through Auth0. The analysis application does not store your sign-in password. We receive identity information needed to recognise your account and verified email.
Your AI platform sends the inputs needed for a tool request to X-Ray and receives the resulting output. Information included in those inputs may therefore be processed by both providers. Keep unnecessary personal information out of investment files and support messages.
Why we process information
We use information to provide requested analysis, maintain your account, protect the service and respond to support or privacy requests.
[[PURPOSES_AND_LAWFUL_BASES: insert the approved basis for account/service processing, security, support and any legal obligations. Where legitimate interests apply, identify those interests. Treat optional website analytics or marketing separately from access to the app.]]
Account identifiers and a verified email are required for sign-in. Analysis inputs are needed only for the calculations you request. If required information is missing, the corresponding service may be unavailable.
[[CUSTOMER_PERSONAL_DATA_ARRANGEMENT: explain whether Resonanz acts as a controller or processor for personal information in customer uploads, and identify any applicable customer processing agreement.]]
[[SECONDARY_USE_POLICY: state the approved position on model training, marketing and other uses of inputs and results. Do not substitute a claim about the AI platform's practices for Resonanz's own policy.]]
Providers and recipients
- Auth0: account authentication and email verification.
- Your AI platform, such as ChatGPT or Claude: your conversation, attachments and the tool results returned to that conversation. Its terms, account settings and privacy notice govern its own processing.
- HubSpot: hosting these website pages and processing any website forms or tracking enabled on them.
- Authorised service providers and personnel: hosting, security and support needed to operate X-Ray, within their assigned responsibilities.
[[PROVIDER_AND_TRANSFER_DETAILS: confirm the relevant contracting entities, hosting locations, other recipients, and any international transfers and safeguards. Explain how to obtain further information about those safeguards.]]
How long information is kept
Working analysis data is temporary. It becomes unavailable when its stated expiry is reached and may become unavailable earlier after a service restart. You can also request deletion of a working dataset. Deleting an original upload removes its dependent working versions and analyses.
[[RETENTION_SCHEDULE: specify the verified working-data availability period and cleanup behaviour, account and account-change retention, support and security record retention, and applicable backup deletion schedules or criteria.]]
Working-data expiry does not delete your account. Deleting working data also does not erase attachments, messages, exported results or other copies held by your AI platform, website providers, your organisation or your device. Use the relevant provider's controls for those copies.
Website cookies and forms
These pages are hosted on the Resonanz website. Its cookie controls govern optional tracking configured for the website. Website contact forms can create contact or support records separately from your X-Ray account.
[[WEBSITE_PRIVACY_AND_COOKIE_LINKS: insert the applicable website notice and cookie controls after checking the scripts, forms and tracking actually enabled on the /mcp/ pages.]]
Your choices and rights
Depending on the applicable law, you may request access, correction, deletion, restriction or portability of your personal information, or object to certain processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. You may complain to a competent data protection authority.
Contact us using the details above. We may verify your identity and will explain any applicable limits or information that must be retained.
X-Ray calculates analytical outputs in response to your requests; it does not execute trades or automatically manage an investment account. Sign-in and email-verification checks control access to the service. Contact support if an access check prevents you from signing in.
Changes to this notice
We will update this page when our processing changes and show the effective date. [[PRIVACY_CHANGE_NOTIFICATION_METHOD]]