Privacy policy
Effective Last revised
This policy explains what we collect when you use fznanalytics.com, apply for access, or sign in to Workspace Pro, what we do with it, and who else touches it. We do not sell personal information.
01 Who we are and what this covers
Sang Lucci Trading, LLC, doing business as FZN Analytics ("FZN," "we," "us," "our"), is responsible for the personal information described here.
This Policy covers fznanalytics.com, the Workspace Pro application, our data and API services, and our email communications. It explains what we collect when you visit the site, apply for access, or use the workspace, what we do with it, and who else touches it.
The Services are intended for people aged 18 and over. We do not knowingly collect information from children.
02 Summary
We do not sell personal information, share it for cross-context behavioral advertising, or process it for targeted advertising.
Our marketing site sets no cookies. Our analytics is self-hosted and cookieless. We deploy no advertising, retargeting, or cross-site tracking pixels anywhere.
We do not buy personal information.
03 Information we collect
Account information. Your name, email address, and the credentials used to sign in.
Application information. If you apply for access, the email address, name, broker or platform, and free-text answer you submit, together with the consents you gave on the form.
Billing information. Your billing details and payment history. Card numbers are handled by Stripe and never reach our servers.
Workspace settings. Your layouts, panes, columns, watchlists, alert configuration, and display preferences, so the workspace looks the same when you return.
Connected accounts. Where you connect a Discord account, the identifier that links it to your entitlements.
Automatically collected. Device and browser information, IP address (from which an approximate region is derived), usage data and timestamps, and error diagnostics when something breaks.
We do not buy personal information, and we do not collect special categories of data.
04 How we use information
- Provide the Services, including authenticating you and restoring your saved workspace
- Process transactions and manage your licence
- Respond to your questions and provide support
- Send transactional messages about your account, application, purchases, and security
- Send research and marketing email where you have asked for it
- Monitor, debug, and secure the platform
- Detect and prevent fraud and unauthorized access
- Meet legal and accounting obligations
We do not use personal information to make decisions that produce legal or similarly significant effects about you.
05 Legal bases for processing (EEA, UK, and Switzerland)
Contract. Providing the Services, managing your licence, and sending transactional messages.
Consent. Sending research and marketing email. You can withdraw consent at any time, separately for each, without affecting your account.
Legitimate interests. Securing the platform, preventing fraud, debugging, and understanding aggregate site traffic — balanced against your rights.
Legal obligation. Retaining transaction records for tax and accounting.
06 Cookies and similar technologies
The marketing site sets nothing. On fznanalytics.com we set no cookies and store nothing in your browser — no local storage, no session storage.
Analytics. We measure site traffic using Umami, an open-source analytics tool we host ourselves. It records page views, anonymized click and scroll maps, and Core Web Vitals without cookies and without storing anything on your device. Because we run it on our own infrastructure, your browsing data is not sent to an outside analytics company. We do not use it to build profiles about you or to track you across other websites.
Strictly necessary cookies in the workspace. To keep you signed in to Workspace Pro we set a session cookie. It is required for the application to function and cannot be switched off.
No advertising or tracking cookies. We do not deploy advertising, retargeting, or cross-site tracking pixels anywhere on the Services.
Managing cookies. You can block or delete cookies through your browser settings. If you block the session cookie, you will not be able to stay signed in.
Visitors in the EEA and UK. Because our analytics is cookieless and stores nothing on your device, and the only thing we do set — the workspace session cookie — is strictly necessary to deliver something you asked for, we do not show a cookie consent banner. If we ever introduce non-essential cookies, we will add one first.
07 How we disclose information
We disclose personal information to the following categories of recipients:
| Recipient category | Purpose | Provider |
|---|---|---|
| Payment processing | Process transactions, prevent fraud | Stripe |
| Authentication | Sign you in and manage sessions | WorkOS |
| Hosting and infrastructure | Run the Services and store files | DigitalOcean |
| Content delivery and DNS | Route and protect traffic | Cloudflare |
| Send transactional, research, and marketing email | Brevo | |
| Error monitoring | Diagnose faults and crashes | Sentry |
| Analytics | Measure aggregate site traffic (self-hosted, cookieless) | Umami |
| Community and alert delivery | Link entitlements and deliver alerts where you have connected an account | Discord |
| Professional advisors | Legal, accounting, audit | Counsel, accountants |
We also disclose personal information to comply with law — in response to subpoenas, court orders, or other lawful requests, and to establish or defend legal claims; to protect rights and safety — to enforce our Terms, investigate fraud or unauthorized use, and protect the rights, property, or safety of FZN, our users, or others; and in a business transaction — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy or notice of a successor policy.
Our service providers are bound by contract to use personal information only to perform services for us.
"Sale" and "sharing" of personal information. US state privacy laws define “sale” broadly to include disclosures for valuable consideration, not just for money, and California defines “sharing” to include disclosing personal information for cross-context behavioral advertising. We do not sell personal information, share it for cross-context behavioral advertising, or process it for targeted advertising, and we have not done so in the preceding twelve months. We do not deploy advertising or retargeting pixels, and we do not disclose personal information to advertising networks or data brokers. Disclosures to the service providers listed above are made only so they can perform services for us, which is not a sale or share under these laws.
08 Your choices and opt-outs
Research and marketing email are separate. You choose them independently when you apply, and you can change either without affecting the other. Every such email includes an unsubscribe link. Unsubscribing from one does not unsubscribe you from the other, and neither stops transactional messages about your account, application, purchases, or security.
Global Privacy Control. We honor the Global Privacy Control (GPC) signal. Because we do not sell or share personal information or run targeted advertising, there is no sale or share for a GPC signal to stop — but we treat an incoming GPC signal as a standing instruction and will continue to honor it if our practices ever change.
Do Not Track. Do Not Track ("DNT") is a legacy browser setting with no agreed industry standard, and we do not respond to DNT signals. We do respond to GPC as described above.
Opt out of sale, sharing, and targeted advertising. We do not engage in these activities, so no opt-out is required. If that changes, we will update this Policy and add a "Your Privacy Choices" link to our site footer before the change takes effect.
Account information. You can review and update most account details by signing in, or by contacting us.
09 Retention
We keep personal information only as long as we need it for the purposes described in this Policy, then delete or de-identify it.
| Category | Retention period |
|---|---|
| Account records and saved layouts | Retained while your account exists and after cancellation, so your layouts are intact if you return. Deleted on request |
| Transaction and billing records | 7 years, to meet tax and accounting obligations. Retained even after account deletion, as permitted by law |
| Access applications | Retained while your application is under consideration and afterwards as a record of the consents you gave |
| Marketing and research contact records | Until you unsubscribe, then retained on a suppression list so we do not email you again |
| Error diagnostics | A limited period for debugging, then discarded |
| Analytics data | Aggregate page views, click and scroll maps, and Core Web Vitals, retained on our own infrastructure |
| Server and security logs | A limited period for security monitoring and troubleshooting |
A note on account deletion. We do not automatically delete inactive accounts, because people frequently return and expect their saved layouts to still be there. If you would prefer your data removed, ask us and we will delete it.
10 US state privacy rights
We extend the following rights to all US residents, regardless of the state you live in:
- Know and access what personal information we hold about you
- Correct inaccurate personal information
- Delete personal information, subject to the exceptions the law allows
- Receive your information in a portable format
- Opt out of sale, sharing, and targeted advertising — activities we do not engage in
- Be free from discrimination for exercising any of these rights
To make a request, email contact@fznanalytics.com with "Privacy Request" in the subject line. We will verify your identity against the information we already hold, and respond within 45 days. Where a request is complex we may extend that by a further 45 days and will tell you why. If we decline a request you may appeal by replying to our response; we will answer the appeal within 45 days.
An authorized agent may make a request on your behalf with proof of authorization.
11 Rights in the EEA, UK, and Switzerland
If you are in the EEA, the UK, or Switzerland, you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time without affecting processing already carried out.
Exercise them by emailing contact@fznanalytics.com. You also have the right to complain to your local supervisory authority.
International transfers. We are based in the United States and our service providers are principally in the United States. Where personal information is transferred out of the EEA, the UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses and, for the UK, the International Data Transfer Addendum.
12 Security
We protect personal information with TLS encryption in transit, encryption at rest, access controls, multi-factor authentication on administrative accounts, and restricted database access.
No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities where the law requires it.
13 Changes to this Policy
We may update this Policy. When we do, we will revise the "Last revised" date above. If a change materially affects how we handle your personal information, we will give notice by email before it takes effect.
14 Contact
Sang Lucci Trading, LLC (d/b/a FZN Analytics)
1412 6th Street, Berkeley, CA 94710, United States
General: support@fznanalytics.com
Privacy requests: contact@fznanalytics.com