Privacy policy
Last updated 2026-10-15
QUITE RIGHT LIMITED ("we") runs scalpeltrade.com and sells the Scalpel desktop app. This policy explains what personal data we hold, why, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018). We are the controller of this data.
What we collect
- Account: your email address, and your name and profile picture if you sign in with Google.
- Purchases: what you bought, when, and the amounts. Stripe handles payment and holds your card details; we never see them. Stripe also collects your billing address to work out tax.
- Licence activations: for each machine you activate, a one-way hash of the machine identifier, a machine name, the app version and when it last checked in. We never receive your raw hardware identifiers.
- Discord: if you link Discord, your Discord user id and username, so we can give you the Customer role in our support server.
- Referrals: if you are a referrer, your referral code, the commissions you earn and your Stripe Connect account id. Stripe holds your identity and bank details. If you arrive through a referral link, we record the click (without identifying you) and, only if you accept cookies, store which referrer sent you.
- Waitlist: your email, if you join it.
- Technical: IP addresses, briefly, for rate limiting and security, and standard server logs held by our hosting provider.
- Analytics: if you accept cookies, Google Analytics records which pages you visit, roughly where from (country and city) and what device and browser you use, so we can see which pages help. It does not tell us who you are.
The Scalpel app itself connects to your Interactive Brokers account on your own computer. Your trading data, positions and orders stay on your machine; we do not receive them.
Why we use it
- To provide your account, deliver and check your licence, and send your downloads: performing our contract with you.
- To take payment, keep records and meet tax obligations: legal obligation.
- To run the referral program and prevent abuse: legitimate interests and our contract with referrers.
- To email you about your purchase and essential product updates. We send marketing only if you opt in, such as by joining the waitlist.
- To understand which pages are useful, with Google Analytics: your consent, given by accepting cookies.
Cookies
We use essential cookies to keep you signed in and to remember your cookie choice. Two things are optional and happen only if you click Accept: Google Analytics cookies (_ga, kept up to two years) that count visits and pages, and a cookie that stores which referrer sent you, for 60 days. If you choose Essential only, Google Analytics is not loaded at all. We use no advertising cookies. To change your choice, clear this site's cookies and the banner asks again.
Who we share it with
Our processors, only as needed to run the service: Vercel (hosting), Neon (database), Stripe (payments, tax and referral payouts), Resend (email), Google (sign-in, if you use it, and Analytics, if you accept cookies) and Discord (support server, if you link it). Some of these process data outside the UK under appropriate safeguards such as the UK International Data Transfer Addendum. We do not sell your data.
How long we keep it
Account and licence data for as long as you hold a licence or account. Purchase and tax records for six years after the purchase, as UK law requires. Waitlist emails until you unsubscribe or we launch. Rate-limit records for about an hour.
Your rights
You can ask for a copy of your data, to correct it, to delete it (subject to records we must keep), to restrict or object to its use, and to move it. Email hello@scalpeltrade.com. You can also complain to the Information Commissioner's Office at ico.org.uk.
Contact
QUITE RIGHT LIMITED, [registered office to add]. hello@scalpeltrade.com