Introduction
This privacy notice applies to the Lexicon Strategy Research Platform (SRP) from Prismark Systems, currently in Private Beta.
It describes what personal data we collect, why we collect it, how it is stored and used, and what rights you have.
This is a private-beta operational privacy notice. It may be updated as the product and beta programme evolve.
If material changes are made, we will update this page and notify active beta participants.
What data we collect
We collect personal data only when you interact with the Lexicon beta — by applying, logging in, submitting feedback, or contacting support.
We do not create accounts for, or build profiles of, people who simply browse the public website. Our hosting and security providers, listed below, process basic technical information such as IP addresses in order to deliver and protect the site.
Product usage information. When you use Lexicon, we record usage events linked to your account — for example, when you launch the application or run a backtest — so we can operate the service, diagnose problems, and understand how the product is used. This information is handled under the retention rules described in this policy and is deleted or anonymised when your account is deleted.
Beta application form
- Country / time zone
- Optional social handles
- The asset classes you trade and want to backtest
- Your trading experience, commitment, frequency, style and approach
- Your current backtesting practice and methods
- Optional descriptions of setups you have wanted to test
- Expected weekly usage and beta-testing background
- The date and time you accepted the beta terms
Your name and email address are taken from your portal account rather than asked on the form. The full submission is also stored as a raw snapshot for archival purposes.
Portal and beta-user account
- Email address (from Supabase Auth)
- Display name
- Account status (invited, active, suspended, revoked)
- First-login and last-login timestamps
- Login events (event type, request route, user-agent string, timestamp)
Feedback submissions
- Feedback category, severity, subject, and body text
- Optional reproduction steps
- Request context (page route, user-agent, timestamp) — only if you opt in
Contact and support
- Email correspondence with support@prismarksystems.com, feedback@prismarksystems.com, bugs@prismarksystems.com, or beta@prismarksystems.com
- Any details you include in your message
Usage and workspace activity
- GUI workspace launch events — recorded only for accounts where usage tracking is enabled by the admin team
- First and last GUI launch timestamps
- Session start and end events (workspace open/close)
- Backtest submission, completion, and failure events
- Session IDs and backtest result IDs associated with these events
- Screen contents, keystrokes, passwords, secrets, and raw strategy definitions are not recorded as part of usage-event tracking
Strategies and results
- When you use the Lexicon workspace, the strategies you define and the results of the tests you run are stored so that you can return to them. This is separate from usage-event tracking described above, which records only that an action happened.
Why we use your data
We use the data we collect for specific operational purposes related to running the Private Beta:
Application review
- To assess whether your workflow and research goals are a fit for the beta
- To contact you about beta access or follow-up questions
Access management
- To create and manage your beta user account
- To authenticate your portal sessions
- To control and revoke access when necessary
Feedback and product improvement
- To understand how the platform works in practice
- To identify bugs, confusion points, and missing features
- To improve the product, documentation, and beta experience
Support and communication
- To respond to support requests and technical issues
- To send operational emails (application receipt, access invitations, feedback confirmations)
Security and operations
- To log login events for security monitoring
- To audit admin actions and system changes
Usage monitoring
- To monitor platform reliability and identify usage errors
- To support debugging when you report issues
- To plan capacity and infrastructure for the beta programme
- To analyse beta usage patterns and inform future fair-use and billing planning (billing is not yet live)
Marketing and product updates
- If you have opted in, we use your email address to send product news and research notes. You can withdraw this at any time from your account settings, or from the unsubscribe link in any such email.
Services we use
We use a small number of third-party services to run the beta. Analytics runs only with your consent, as described in the Cookies section below.
Supabase
- Postgres database — stores application data, user profiles, feedback, and audit logs
- Supabase Auth — manages beta user authentication sessions via secure JWT tokens
- Hosted by Supabase (supabase.com)
Resend
- Transactional email delivery — sends application confirmations, invitations, feedback receipts, and internal notifications
- Resend (resend.com) delivers emails on our behalf. Email content is our responsibility.
Render
- Web hosting — serves the Lexicon website and API
- Render (render.com) provides the hosting infrastructure. It does not store application data.
Hetzner
- Lexicon engine hosting — the engine performs backtest calculations and stores the historical market data used to run them
- Your strategies and backtest results are processed on this server
- Hetzner Online GmbH (hetzner.com) provides the dedicated server, which is located in Germany.
Google
- Google (google.com) — provides "Sign in with Google" and, separately, Google Analytics. If you sign in with Google, Google shares your name, email address and profile picture with us so we can create and identify your account; we do not receive your Google password or access anything else in your account. Google Analytics operates only with your consent, as described in the Cookies section.
Cloudflare
- Cloudflare (cloudflare.com) — routes and protects traffic to our website and to the Lexicon workspace.
Where your data is stored
Prismark Systems is a company registered in Florida, United States. Your data is processed and stored on servers in the European Union and the United States, depending on the service. Our processors are listed above, and we choose providers that maintain appropriate safeguards for international data transfers.
Cookies and session data
We use strictly necessary session cookies to manage authenticated access. Beyond these, analytics cookies are used only with your consent, as described below.
Website analytics. We use Google Analytics to understand how visitors use our website. Google LLC acts as a data processor on our behalf. Analytics cookies are set only if you choose "Accept All" in our cookie banner; if you choose "Reject All," no analytics data is collected. The data collected includes pages visited, approximate location (city level), device and browser information, and how you arrived at our site. We have configured Google Analytics to retain this data for 14 months. Google may process this data on servers outside the UK/EEA, including in the United States. You can change your choice at any time by clearing this site's cookies, which will show the consent banner again.
Portal session cookies
- Set by Supabase Auth to maintain your beta user session
- Contain encrypted JWT tokens with automatic expiry
- Deleted when you sign out or the session expires
Admin session cookie
- beta_admin_session — HMAC-signed admin session cookie
- 8-hour expiry by default
- Used only to access the internal admin dashboard
How long we keep your data
We keep the personal information associated with your account for as long as you have an account with us. If you close your account, or ask us to delete your data, we will remove it within 30 days.
We keep anonymised strategy patterns indefinitely. These are records of the structure of strategies tested on the platform, with any link to the person who created them removed. Once that link is removed the information no longer identifies anyone, and we retain it to improve the product and develop new features.
Some records are kept longer where we are required to, for example billing and tax records once you become a paying customer.
Your rights
You have the right to request access to, correction of, or deletion of your personal data.
You may also ask questions about how we handle your data.
To exercise any of these rights, contact us at:
Beta and research-software note
Lexicon is Private Beta research software. It is not financial advice, not a signal service, not a broker,
and not a profit system. Any backtest output should be treated as historical research for review.
By applying for or participating in the beta, you acknowledge that the product is being validated and
that features, data handling, and this privacy notice may evolve.
