Privacy Policy

Last updated: October 2026

1. Global Privacy Framework & Data Controller

This Global Privacy Policy & Data Processing Notice (“Privacy Policy”) explains how Deep Advantage (“we,” “us,” or “our”), represented by founder Victory Obiechefu, collects, processes, and safeguards information when you visit our public marketing website at deepadvantage.online, access our web application (“the App”) at app.deepadvantage.online, read our executive publications, interact with our macroeconomic intelligence and Markets features, stream podcasts, or join our community Circles.

This Policy is engineered to comply with the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - “GDPR”), the United Kingdom Data Protection Act 2018 / UK GDPR, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA” - Cal. Civ. Code § 1798.100 et seq.), and Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”).

The designated Data Controller responsible for your personal data is Deep Advantage. Legal and privacy inquiries may be directed to: [email protected].

2. Categories of Data Processed

We strictly adhere to the principle of data minimization (GDPR Article 5(1)(c)). We collect and process only the information strictly necessary to provide and secure our strategic intelligence services:

A. Information You Voluntarily Provide

• Identity & Profile Details: Full name, professional email address, executive job title, company affiliation, and optional avatar image submitted during registration or profile configuration inside the application.
• Account Credentials: Securely salted and hashed authentication credentials managed via Firebase Authentication.
• Community Contributions: Comments, executive discussions, and messages submitted within private Circle mastermind forums.
• Direct Communications: Inquiries, feedback, editorial correspondence, or support requests submitted via email or in-app channels.

B. Technical & Operational Telemetry (Automatically Collected)

• Device & Network Telemetry: Anonymized IP addresses, browser user-agent strings, operating system versions, device screen specifications, and language preferences.
• Application Performance Logs: Edge latency telemetry, service worker cache diagnostics, and anonymized error stack traces processed via Cloudflare CDN.
• Cookieless Aggregate Analytics: Aggregate page view metrics and web vitals collected via Cloudflare Web Analytics without cookies, persistent identifiers, or cross-site tracking.

C. Subscription & Payment Verification

• Entitlement Records: Membership status (Free, Premium, VIP, Vault, Circle), subscription renewal dates, and transaction identifiers.
• Payment Card Data: Full credit card numbers, billing addresses, and CVV codes are processed directly by PCI-DSS compliant checkout gateways (Nestuge / Substack). Deep Advantage never collects, stores, or accesses your full credit card data.

D. Special Category Data Exclusion

Deep Advantage does not collect or process “Special Category Data” under GDPR Article 9 (such as biometric identifiers, genetic data, health information, philosophical beliefs, or trade union memberships), nor do we track real-time precise GPS geographic coordinates.

3. Macroeconomic Intelligence & Markets Telemetry

Our platform includes interactive macroeconomic intelligence, global financial hub telemetry, and market indicators (covering major equity indices, benchmark yields, foreign exchange pairs, and commodities across New York, London, Tokyo, Singapore, Lagos, and San Francisco):

• Informational & Delayed Market Quotes: Market pricing data and quotes (such as S&P 500, Nasdaq 100, FTSE 100, Nikkei 225, Straits Times, USD/NGN, Gold, and Bitcoin) are retrieved via secure, server-side edge proxies (/api/markets/*) from public financial data sources. All market indicators are delayed and intended strictly for educational and strategic analysis. They do not constitute financial, investment, legal, or tax advice.
• Zero Brokerage or Financial Account Access: Deep Advantage does not connect to your personal bank accounts, brokerage portfolios, crypto wallets, trading platforms, or financial institutions. We never request, process, or store financial portfolio balances, trading activity, or account credentials.
• Local Market Preferences & Caching: Your active hub selections (e.g., toggling between New York, London, Tokyo, Singapore, Lagos, or San Francisco) and localized market display preferences are stored exclusively on your local device using standard browser localStorage. This data remains on your hardware and is never synced to our central servers or used for behavioural profiling.
• Curated Market Intelligence & News Routing: Market briefs and curated news headlines link out to original reporting from third-party financial publishers (such as Bloomberg, Reuters, Financial Times, and CNBC). When navigating to external publisher websites, you are subject to the independent privacy, cookie, and data policies of those respective third-party publishers.

4. Lawful Grounds for Processing (GDPR Article 6)

We process personal data only when grounded in a verified lawful basis under GDPR Article 6:

• Performance of a Contract (Art. 6(1)(b)): Delivering subscribed strategic publications, provisioning offline caching, synchronizing member entitlements, and processing renewal billing.
• Legitimate Interests (Art. 6(1)(f)): Protecting platform security, mitigating DDoS attacks and automated scraping via Cloudflare edge routing, enforcing single-seat license integrity, and diagnosing performance bottlenecks.
• Explicit Consent (Art. 6(1)(a)): Delivering opt-in Web Push notifications regarding new strategic essays, which you can enable or revoke at any time via Profile settings.
• Legal Obligation (Art. 6(1)(c)): Retaining transaction tax invoices, accounting records, and responding to valid statutory subpoenas.

5. On-Device Storage, Cookies & App Offline Cache

Privacy-First On-Device Architecture: The Deep Advantage app is built with local-first technologies. Your reading preferences (font size, serif vs. sans, liquid glass morphism effects, dark/light theme mode, bookmarked issues, and active market hub view) are stored strictly on your local device using standard browser localStorage, sessionStorage, and IndexedDB APIs. This data is never transmitted to our servers for profiling or commercial advertising.

Zero Behavioral Ad Cookies: We do not employ third-party behavioral advertising cookies, retargeting pixels (such as Meta Pixel or Google AdSense), or cross-site tracking scripts. We utilize only strictly necessary session tokens for user authentication and edge security cookies required by Cloudflare for bot mitigation and rate-limiting.

6. Third-Party Sub-processors & Cloud Infrastructure

We partner with enterprise infrastructure providers who operate under executed Data Processing Agreements (DPAs) incorporating standard contractual clauses:

• Cloudflare, Inc. (USA / Global): Global edge CDN delivery, SSL/TLS 1.3 cryptographic termination, DDoS mitigation, and cookieless performance analytics.
• Google Cloud Platform & Firebase (USA / EU): Authenticated user access controls, encrypted Firestore database persistence, and secure serverless backend edge functions.
• Substack Inc. (USA): Newsletter syndication and subscriber email distribution.
• Nestuge (Nestuge Inc.): Secure payment checkout orchestration and subscription fulfillment.

7. International Cross-Border Data Transfers

When personal data is transferred outside the European Economic Area (EEA), the United Kingdom, or Switzerland, we ensure adequate legal safeguards are enforced. We execute the European Commission’s Standard Contractual Clauses (SCCs, Implementing Decision (EU) 2021/914) and the UK International Data Transfer Addendum, requiring our sub-processors to maintain equivalent data protection and security standards.

8. Data Retention Cycles & Erasure Schedule

We retain personal data only for as long as necessary to fulfill the purposes set out in this Policy. When you request account termination or execute the “Reset Preferences & Clear Cache” function in the application Profile page, all local cache tokens are wiped instantly. Server-side account records are permanently purged or irreversibly anonymized within thirty (30) days, except for statutory tax and accounting transaction records retained for the legally required duration (typically 5 to 7 years).

9. Your Global Statutory Rights (GDPR, CCPA/CPRA & UK DPA)

Regardless of your geographic location, Deep Advantage affords you comprehensive data rights:

• Right of Access & Data Portability (GDPR Art. 15, 20 / CCPA § 1798.100): You may request an exported copy of your personal data in a structured, commonly used, machine-readable JSON format.
• Right to Rectification (GDPR Art. 16 / CCPA § 1798.106): You can edit your name, job title, and company affiliation directly inside the application Profile view at any time.
• Right to Erasure (“Right to be Forgotten” - GDPR Art. 17 / CCPA § 1798.105): You have the right to request the complete deletion of your personal account data.
• Right to Restrict or Object to Processing (GDPR Art. 18, 21): You may object to data processing grounded in legitimate interests.
• Right to Opt Out of Sale or Sharing of Personal Information (CCPA § 1798.120): We do not sell or share personal information for cross-context behavioral advertising. As such, no opt-out is necessary, but our policy fully satisfies statutory standards.
• Right to Non-Discrimination (CCPA § 1798.125): We will never deny you service, degrade content quality, or charge different prices for exercising your statutory privacy rights.

To exercise any statutory right, contact us at: [email protected]. We verify and respond to verified requests within thirty (30) days without charge.

10. Enterprise Security Architecture

We employ administrative, technical, and physical safeguards designed to prevent unauthorized access, disclosure, or alteration of data. These measures include TLS 1.3 cryptographic protocols for all data in transit, AES-256 cloud encryption at rest, principle-of-least-privilege access for administrative systems, and automated vulnerability scanning.

11. Protection of Minors (COPPA Compliance)

Deep Advantage is directed exclusively to business executives, founders, and professionals. The platform is not intended for or marketed to individuals under eighteen (18) years of age. We do not knowingly collect personal data from children under the age of 13 (or under 16 in applicable jurisdictions) in compliance with the Children’s Online Privacy Protection Act (“COPPA”). If we become aware that a minor has provided us with personal information, we will take prompt steps to delete that data.

12. Regulatory Supervisory Authorities

If you believe our data processing infringes your statutory privacy rights, you have the right to lodge a complaint with your competent supervisory authority (such as the UK Information Commissioner’s Office - ICO, an EU National Data Protection Authority, or the California Privacy Protection Agency - CPPA). We encourage you to contact us first at [email protected] so we may resolve your concern directly.