Legal

Privacy policy

Effective Last revised

This policy explains what we collect when you use fznanalytics.com, apply for access, or sign in to Workspace Pro, what we do with it, and who else touches it. We do not sell personal information.

01 Who we are and what this covers

Sang Lucci Trading, LLC, doing business as FZN Analytics ("FZN," "we," "us," "our"), is responsible for the personal information described here.

This Policy covers fznanalytics.com, the Workspace Pro application, our data and API services, and our email communications. It explains what we collect when you visit the site, apply for access, or use the workspace, what we do with it, and who else touches it.

The Services are intended for people aged 18 and over. We do not knowingly collect information from children.

02 Summary

We do not sell personal information, share it for cross-context behavioral advertising, or process it for targeted advertising.

Our marketing site sets no cookies. Our analytics is self-hosted and cookieless. We deploy no advertising, retargeting, or cross-site tracking pixels anywhere.

We do not buy personal information.

03 Information we collect

Account information. Your name, email address, and the credentials used to sign in.

Application information. If you apply for access, the email address, name, broker or platform, and free-text answer you submit, together with the consents you gave on the form.

Billing information. Your billing details and payment history. Card numbers are handled by Stripe and never reach our servers.

Workspace settings. Your layouts, panes, columns, watchlists, alert configuration, and display preferences, so the workspace looks the same when you return.

Connected accounts. Where you connect a Discord account, the identifier that links it to your entitlements.

Automatically collected. Device and browser information, IP address (from which an approximate region is derived), usage data and timestamps, and error diagnostics when something breaks.

We do not buy personal information, and we do not collect special categories of data.

04 How we use information

  • Provide the Services, including authenticating you and restoring your saved workspace
  • Process transactions and manage your licence
  • Respond to your questions and provide support
  • Send transactional messages about your account, application, purchases, and security
  • Send research and marketing email where you have asked for it
  • Monitor, debug, and secure the platform
  • Detect and prevent fraud and unauthorized access
  • Meet legal and accounting obligations

We do not use personal information to make decisions that produce legal or similarly significant effects about you.

05 Legal bases for processing (EEA, UK, and Switzerland)

Contract. Providing the Services, managing your licence, and sending transactional messages.

Consent. Sending research and marketing email. You can withdraw consent at any time, separately for each, without affecting your account.

Legitimate interests. Securing the platform, preventing fraud, debugging, and understanding aggregate site traffic — balanced against your rights.

Legal obligation. Retaining transaction records for tax and accounting.

06 Cookies and similar technologies

The marketing site sets nothing. On fznanalytics.com we set no cookies and store nothing in your browser — no local storage, no session storage.

Analytics. We measure site traffic using Umami, an open-source analytics tool we host ourselves. It records page views, anonymized click and scroll maps, and Core Web Vitals without cookies and without storing anything on your device. Because we run it on our own infrastructure, your browsing data is not sent to an outside analytics company. We do not use it to build profiles about you or to track you across other websites.

Strictly necessary cookies in the workspace. To keep you signed in to Workspace Pro we set a session cookie. It is required for the application to function and cannot be switched off.

No advertising or tracking cookies. We do not deploy advertising, retargeting, or cross-site tracking pixels anywhere on the Services.

Managing cookies. You can block or delete cookies through your browser settings. If you block the session cookie, you will not be able to stay signed in.

Visitors in the EEA and UK. Because our analytics is cookieless and stores nothing on your device, and the only thing we do set — the workspace session cookie — is strictly necessary to deliver something you asked for, we do not show a cookie consent banner. If we ever introduce non-essential cookies, we will add one first.

07 How we disclose information

We disclose personal information to the following categories of recipients:

Recipient categoryPurposeProvider
Payment processingProcess transactions, prevent fraudStripe
AuthenticationSign you in and manage sessionsWorkOS
Hosting and infrastructureRun the Services and store filesDigitalOcean
Content delivery and DNSRoute and protect trafficCloudflare
EmailSend transactional, research, and marketing emailBrevo
Error monitoringDiagnose faults and crashesSentry
AnalyticsMeasure aggregate site traffic (self-hosted, cookieless)Umami
Community and alert deliveryLink entitlements and deliver alerts where you have connected an accountDiscord
Professional advisorsLegal, accounting, auditCounsel, accountants

We also disclose personal information to comply with law — in response to subpoenas, court orders, or other lawful requests, and to establish or defend legal claims; to protect rights and safety — to enforce our Terms, investigate fraud or unauthorized use, and protect the rights, property, or safety of FZN, our users, or others; and in a business transaction — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy or notice of a successor policy.

Our service providers are bound by contract to use personal information only to perform services for us.

"Sale" and "sharing" of personal information. US state privacy laws define “sale” broadly to include disclosures for valuable consideration, not just for money, and California defines “sharing” to include disclosing personal information for cross-context behavioral advertising. We do not sell personal information, share it for cross-context behavioral advertising, or process it for targeted advertising, and we have not done so in the preceding twelve months. We do not deploy advertising or retargeting pixels, and we do not disclose personal information to advertising networks or data brokers. Disclosures to the service providers listed above are made only so they can perform services for us, which is not a sale or share under these laws.

08 Your choices and opt-outs

Research and marketing email are separate. You choose them independently when you apply, and you can change either without affecting the other. Every such email includes an unsubscribe link. Unsubscribing from one does not unsubscribe you from the other, and neither stops transactional messages about your account, application, purchases, or security.

Global Privacy Control. We honor the Global Privacy Control (GPC) signal. Because we do not sell or share personal information or run targeted advertising, there is no sale or share for a GPC signal to stop — but we treat an incoming GPC signal as a standing instruction and will continue to honor it if our practices ever change.

Do Not Track. Do Not Track ("DNT") is a legacy browser setting with no agreed industry standard, and we do not respond to DNT signals. We do respond to GPC as described above.

Opt out of sale, sharing, and targeted advertising. We do not engage in these activities, so no opt-out is required. If that changes, we will update this Policy and add a "Your Privacy Choices" link to our site footer before the change takes effect.

Account information. You can review and update most account details by signing in, or by contacting us.

09 Retention

We keep personal information only as long as we need it for the purposes described in this Policy, then delete or de-identify it.

CategoryRetention period
Account records and saved layoutsRetained while your account exists and after cancellation, so your layouts are intact if you return. Deleted on request
Transaction and billing records7 years, to meet tax and accounting obligations. Retained even after account deletion, as permitted by law
Access applicationsRetained while your application is under consideration and afterwards as a record of the consents you gave
Marketing and research contact recordsUntil you unsubscribe, then retained on a suppression list so we do not email you again
Error diagnosticsA limited period for debugging, then discarded
Analytics dataAggregate page views, click and scroll maps, and Core Web Vitals, retained on our own infrastructure
Server and security logsA limited period for security monitoring and troubleshooting

A note on account deletion. We do not automatically delete inactive accounts, because people frequently return and expect their saved layouts to still be there. If you would prefer your data removed, ask us and we will delete it.

10 US state privacy rights

We extend the following rights to all US residents, regardless of the state you live in:

  • Know and access what personal information we hold about you
  • Correct inaccurate personal information
  • Delete personal information, subject to the exceptions the law allows
  • Receive your information in a portable format
  • Opt out of sale, sharing, and targeted advertising — activities we do not engage in
  • Be free from discrimination for exercising any of these rights

To make a request, email contact@fznanalytics.com with "Privacy Request" in the subject line. We will verify your identity against the information we already hold, and respond within 45 days. Where a request is complex we may extend that by a further 45 days and will tell you why. If we decline a request you may appeal by replying to our response; we will answer the appeal within 45 days.

An authorized agent may make a request on your behalf with proof of authorization.

11 Rights in the EEA, UK, and Switzerland

If you are in the EEA, the UK, or Switzerland, you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time without affecting processing already carried out.

Exercise them by emailing contact@fznanalytics.com. You also have the right to complain to your local supervisory authority.

International transfers. We are based in the United States and our service providers are principally in the United States. Where personal information is transferred out of the EEA, the UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses and, for the UK, the International Data Transfer Addendum.

12 Security

We protect personal information with TLS encryption in transit, encryption at rest, access controls, multi-factor authentication on administrative accounts, and restricted database access.

No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities where the law requires it.

13 Changes to this Policy

We may update this Policy. When we do, we will revise the "Last revised" date above. If a change materially affects how we handle your personal information, we will give notice by email before it takes effect.

14 Contact

Sang Lucci Trading, LLC (d/b/a FZN Analytics)

1412 6th Street, Berkeley, CA 94710, United States

General: support@fznanalytics.com

Privacy requests: contact@fznanalytics.com