Privacy Policy

1. Who we are

Damantis LLC ("Damantis", "we", "us") operates damantis.com and the Damantis signal and analytics service. We are the business responsible for the personal information described here. Our contact details are in Section 12.

The service is offered to residents of the United States only. If you are outside the United States, please do not use the service or send us personal information.

2. What we collect, and why

We do not ask for, and you should not send us, sensitive information such as government identifiers, financial account numbers, health data, biometric data or precise geolocation. We do not collect information about your brokerage accounts, holdings or trades.

3. What we do not do

• We do not sell your personal information, and we never have.
• We do not share it for cross-context behavioural or targeted advertising.
• We do not run advertising on the service, and we do not allow third parties to collect personal information about you across other websites through our service.
• We do not use advertising or tracking cookies, and we do not build advertising or individual visitor profiles. Our visit statistics (Section 2) are cookie-free and count totals only.
• We do not use your personal information to train machine-learning models.
• We send marketing emails only if you ask for them: the weekly Damantis Extremes Index email, after you confirm your address. Every issue has a one-click unsubscribe. Account emails are transactional: sign-up confirmation, receipts, renewal and price-change notices, security alerts, and changes to our terms.

4. Cookies and Do Not Track

We use strictly necessary cookies only — those that keep you signed in, protect the sign-in form, and route your requests. They carry no advertising or analytics function. You can block them in your browser, but the service will not work without them.

Do Not Track. Because we do not track users over time or across third-party websites, there is nothing for a Do Not Track signal to switch off. We therefore do not respond differently to Do Not Track or Global Privacy Control signals — our behaviour is already the same as if you had sent one. As stated above, we do not permit third parties to collect personal information about you across other sites through our service.

5. Who we share it with

We share personal information only with service providers who process it on our behalf, under contract, and only for the purposes above:

• Stripe, Inc. — payment processing, card data, fraud screening and tax calculation.
• Our hosting and infrastructure provider — storage and operation of the service.
• Our transactional email provider — delivery of account and billing emails.
• Plausible Insights OÜ (Estonia) — our website statistics provider: processes visit data as described in Section 2, without cookies and without storing IP addresses.
• Our accountants and legal advisers — where needed for tax filings or legal advice.

We may also disclose personal information where we are legally required to — in response to a valid subpoena, court order, tax authority request or other lawful demand — or where necessary to establish, exercise or defend legal claims, or to protect the rights and safety of Damantis, our users or the public. If Damantis is involved in a merger, acquisition or sale of assets, personal information may transfer as part of that transaction; we will notify you before your information becomes subject to a different privacy policy.

6. How long we keep it

• Account data — for as long as your account is open, then deleted or anonymised within 90 days of closure.
• Billing and transaction records — seven years after the transaction, because tax and accounting law requires it.
• Consent records for automatic renewal — for the period required by applicable state law.
• Newsletter data — while you are subscribed; after you unsubscribe, only the consent record, for as long as we may need to show that we had your consent.
• Technical logs — normally 12 months, longer where an ongoing security or fraud investigation requires it.

7. Security and data breaches

We use encryption in transit, hashed passwords, access controls limited to those who need them, and logging of administrative access. No system is perfectly secure, and we cannot guarantee absolute security.

If a breach compromises unencrypted personal identifying information, we will notify affected individuals in the most expedient time possible and without unreasonable delay, as required by Wyoming's breach notification statute (Wyo. Stat. §§ 40-12-501 and 40-12-502) and by the corresponding law of your state of residence, and we will notify regulators where required.

8. Your rights

Depending on where you live in the United States, you may have the right to:

• know what personal information we hold about you and obtain a copy of it in a portable format;
• have inaccurate information corrected;
• have your information deleted;
• opt out of the sale of your personal information, of sharing it for targeted advertising, and of profiling that produces legal or similarly significant effects — we do none of these, so there is nothing to opt out of;
• appeal a decision we make about your request; and
• not be discriminated against, or receive a worse price or service, for exercising any of these rights.

How to exercise them. Write to privacy@damantis.com from the email address on your account, or contact us at the address in Section 12. We will verify your identity by confirming control of that email address, and will respond within 45 days, extending once by a further 45 days if the request is complex — we will tell you if we need the extension. There is no charge unless a request is manifestly unfounded or excessive. You may use an authorised agent where your state's law allows it; we may ask for proof of authorisation.

If we decline a request, we will explain why and how to appeal. If your appeal is denied, residents of states that provide for it may complain to their state Attorney General.

California residents. The categories in Section 2 correspond to identifiers, customer records, commercial information and internet activity information under the California Consumer Privacy Act; the sources, purposes and recipients are those described in Sections 2 and 5. We have not sold or shared personal information in the preceding twelve months. Under California's "Shine the Light" law (Cal. Civ. Code § 1798.83), we confirm that we do not disclose personal information to third parties for their own direct marketing purposes.

9. Children

The service is for adults. You must be at least 18 to hold an account. We do not knowingly collect personal information from anyone under 18, and we do not knowingly collect information from children under 13 within the meaning of the Children's Online Privacy Protection Act. If you believe a minor has given us information, write to privacy@damantis.com and we will delete it.

10. Where your data is held

Your personal information is stored and processed in the United States. Anonymous website visit statistics are processed by Plausible on servers in the European Union. The service is not offered outside the United States.

11. Changes to this policy

We may update this policy. When we do, we will change the effective date at the top of this page and post the new version here. If a change is material — for example, a new category of information, a new purpose, or a new category of recipient — we will notify you by email to the address on your account at least 30 days before it takes effect, so that you can review it or close your account. Prior versions are available on request.

12. Contact

Privacy requests and questions: privacy@damantis.com
General support: support@damantis.com
Legal notices: legal@damantis.com

We do not operate a telephone support line. Email is the fastest and only supported channel, including for privacy requests. To review or change the personal information in your account, sign in and open your account settings, or write to the address above.