Privacy Policy

Ortick is a product operated by VestGlans Service, CVR 46499484, Sønderparken 19, 6973 Ørnhøj, Denmark. VestGlans Service is the data controller for the personal data described in this policy.

For any privacy question or request — access, correction, deletion, restriction, objection, or withdrawing consent — contact info@ortick.com. You do not need an Ortick account to contact us.

If you complete the Ortick market survey we collect the answers you provide. That includes your name and email address, your country, and your professional answers — your role, main activity, gold types, deal profile, currencies, pain-point and feature ratings, pricing answers, and any free-text answers you choose to write. Phone number, company name and city/region are optional. We also record which acknowledgements and optional choices you selected.

We use these answers to carry out market research into how physical-gold deals are priced, documented and completed, and to produce research findings. The legal basis for processing your survey answers is your consent, given by the required research acknowledgement when you submit.

Published findings are aggregated. Free-text answers are not published word-for-word: they are reduced to counts of recurring themes, and small groups are suppressed so that individual respondents are not singled out. The acknowledgement about aggregated reporting explains how findings may be used; it is an acknowledgement of that practice rather than a separate permission to process your data. The acknowledgement that Ortick gives no guarantees is likewise a product statement, not a permission to use your personal data for anything further.

Three choices in the survey are entirely optional, each with its own separate purpose and its own tick box, and each relying on your consent for that specific purpose:

Report delivery — if you ask for it, we will email you a free copy of the finished Gold Deal Pain Points Report when it is available. This permission covers that report only; it is not permission for other marketing.

Beta access — if you ask for it, we may contact you about early access to Ortick.

Early seller network — if you ask for it, we may contact you about the early seller network.

The required acknowledgements and the answers marked as required are needed to submit the survey. The three optional choices above are not: you can complete the survey and decline all of them, and declining does not affect your participation.

We also process survey submissions to keep the service secure and to identify test, duplicate or abusive entries so that research results stay accurate. Our legitimate interest in that processing is protecting the integrity of the research and of the service.

We keep identifiable survey responses for up to 24 months after submission, unless you ask us to delete them sooner or they are no longer needed for the research. After that we delete them or irreversibly anonymise them. The 24-month period is Ortick's own retention decision, not a period set by law.

Aggregated research findings that no longer identify anyone may be kept for longer. Records we need to keep for legal, audit or security reasons are kept separately and only for as long as there is a lawful reason to keep them, including records of unsubscribes and suppression so that we do not contact you again by mistake.

Deletion and anonymisation of survey responses are carried out by our team when a request is received. We do not currently run an automated deletion job, so if you want your response removed before the retention period ends, please email info@ortick.com and we will action it.

We use a small number of service providers to run Ortick. They process personal data on our instructions.

Supabase provides our database, storage and authentication. Our project is configured in the Central EU region (Frankfurt, Germany), so project data is stored and primarily processed there. Supabase may use personnel or subprocessors in other locations as permitted by its data processing agreement.

Hostinger provides our application hosting. Our production server is currently located in the Netherlands and backups are currently held in Lithuania — both within the EEA. Hostinger may use processors or subprocessors elsewhere under applicable transfer safeguards.

Resend delivers email — including the research report, if you ask for it. Resend receives only what is needed to send the message: the recipient email address and the message itself, which contains your name in the greeting and secure links to the report and to unsubscribe. Your survey answers are not sent to Resend. Resend states that account data such as email metadata, logs and API records is stored in the United States and that its primary processing takes place there, so this involves processing outside the EU/EEA.

Where personal data is transferred outside the EU/EEA, we rely on the safeguards required by applicable data-protection law. These include the European Commission's Standard Contractual Clauses where they apply, and other lawful transfer mechanisms supported by the provider — Resend states that it participates in the EU-U.S. Data Privacy Framework in addition to offering Standard Contractual Clauses.

Provider and subprocessor locations can change over time. Where they do, we continue to rely on an applicable transfer safeguard.

You can ask for a copy of the personal data we hold about you, ask us to correct it, and ask us to delete it. Depending on the circumstances you may also be able to ask us to restrict how we use it, object to our use of it, or receive it in a portable format. These rights are not absolute — in some situations we may need to keep certain records for a lawful reason, and we will tell you if that applies.

Where we rely on your consent, you can withdraw it at any time by emailing info@ortick.com. Withdrawing consent does not make our earlier use of your data unlawful; it stops further use that relied on that consent.

If you are unhappy with how we handle your personal data you can complain to the Danish Data Protection Agency, Datatilsynet (datatilsynet.dk), or to the supervisory authority where you live or work.

Ortick does not make automated decisions about you that produce legal or similarly significant effects.

Ortick is a physical gold market intelligence platform that helps buyers, sellers, brokers, and dealers price gold deals, record them in a Deal Vault, and review performance. Ortick provides deterministic pricing tools and reports — it does not give financial or legal advice and does not guarantee any deal.

When you create an account we store your email address and basic profile preferences (such as default currency, language, weight unit, theme, and your plan). Authentication is handled by our infrastructure provider (Supabase). We do not store your password directly.

When you save a deal, we store the inputs and computed outputs you chose to keep — for example weight, purity, spot price used, costs, target profit, prices, status, and notes. This data is tied to your account and is only accessible to you, enforced by row-level security.

When you generate a PDF report (or, in the future, other documents tied to a deal), we may store a record of that document — its type, title, status, and metadata — linked to your deal so you can manage it. Document records are private to your account.

Broker reports follow strict privacy rules: buyer and seller reports never expose your margins, and the internal report is confidential to you.

Ortick fetches indicative gold prices and historical data from third-party providers on the server. Your deal inputs are not sent to those providers. Provider API keys are kept server-side and are never exposed to your browser. Prices are cached and updated regularly.

We use cookies to keep you signed in and to remember preferences such as your selected currency, language, and theme. These are functional cookies needed for the product to work. We do not sell your data.

Subscription billing is not active yet. When payment features are enabled, payments will be processed by a third-party payment provider, and card details will be handled by that provider — not stored by Ortick. We will update this policy before billing goes live.

We use your data to provide the product: to authenticate you, run your calculations, save and display your deals and performance, generate reports you request, and operate and improve the service. We do not use your saved deal contents to advertise to you.

Data is stored in our managed database (Supabase/PostgreSQL) with row-level security so each user can only access their own records. Access from the application uses scoped credentials; administrative access is restricted.

You can view and edit your saved deals and preferences at any time, and delete individual deals from the Deal Vault. To request export or deletion of your account data, contact us using the details below. We will honor applicable data-protection rights.

Questions about this document? Contact us at info@ortick.com.