Privacy Policy

Who we are

Grey Rabbit LLC (“Grey Rabbit,” “we,” “us,” or “our”) operates Grey Rabbit Markets at greyrabbitmarkets.com and related services (the “Service”). This Privacy Policy explains what personal information we collect, how we use it, and the choices available to you.

By using the Service, you acknowledge this Policy. If you do not agree, please discontinue use of the Service.

Cookies

We use cookies and similar technologies (such as local storage and session identifiers) to operate the Service securely, remember preferences, maintain authenticated sessions, and understand aggregate traffic patterns.

Essential cookies are required for authentication, security, and core functionality. Preference and analytics cookies may be used where configured for production. Embedded third-party content (for example chart widgets, podcast players, or checkout) may set their own cookies under those providers’ policies.

You can control cookies through your browser settings. Blocking certain cookies may limit login, membership, or personalization features. Additional detail appears in our Cookie Policy.

Analytics

We may use privacy-conscious analytics tools to measure page performance, feature usage, referral sources, device categories, and approximate geography derived from IP address.

Analytics data is used to improve reliability, content relevance, and product design. We do not sell analytics profiles as a standalone product. Where a production analytics vendor is configured, its processing is governed by that vendor’s terms and any data-processing agreement we maintain with them.

Authentication

If you create an account, we process credentials and identity data needed to authenticate you, including email address, hashed passwords or tokens issued by our authentication provider, session metadata, and security events (such as failed login attempts).

We use this information to provide access to membership features, protect accounts against abuse, and communicate service-related notices. Do not share your credentials. Contact support if you believe your account has been compromised.

Payments

Paid memberships and products are processed by third-party payment and checkout providers. Those providers collect payment card or wallet details, billing address, and transaction metadata directly.

Grey Rabbit typically receives confirmation of purchase status, plan type, customer identifiers, and limited billing metadata needed for entitlement and support — not full card numbers. Payment processors act as independent controllers or processors under their own privacy notices.

Email subscriptions

If you subscribe to newsletters, alerts, or product updates, we process your email address and related preference settings to deliver those communications.

You may unsubscribe using the link in marketing messages or by contacting us. Transactional messages related to your account, security, or billing may still be sent when necessary to operate the Service.

Account data

Depending on how you use the Service, account-related data may include profile details you provide, membership tier, feature entitlements, support correspondence, onboarding state, and product interaction logs needed to deliver personalized research experiences.

Do not submit sensitive government ID numbers, full bank account numbers, or medical information through public contact forms unless we expressly request them through a secure channel for a specific purpose.

GDPR awareness

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar laws, we process personal data under one or more lawful bases, including performance of a contract (providing the Service you requested), legitimate interests (securing and improving the Service, preventing abuse), consent (where required for certain cookies or marketing), and legal obligation.

Where GDPR or UK GDPR applies, you may have rights to access, rectification, erasure, restriction, portability, and objection, as well as the right to withdraw consent where processing is consent-based. You may also lodge a complaint with your local supervisory authority.

CCPA awareness

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, may provide rights to know, delete, and correct personal information, and to opt out of certain sales or sharing of personal information.

Grey Rabbit Markets does not sell personal information for monetary consideration in the ordinary sense. If we engage in “sharing” for cross-context behavioral advertising as defined by California law, we will provide a clear opt-out mechanism. California residents may exercise applicable rights by contacting us as described below. We will not discriminate against you for exercising privacy rights.

User rights

Subject to applicable law, you may request access to personal information we hold about you, correction of inaccurate data, deletion of data we no longer need to retain, and restriction or objection to certain processing.

To exercise these rights, email hello@greyrabbitmarkets.com with a reasonable description of your request. We may need to verify your identity before fulfilling the request. Some rights are limited where we must retain data for security, fraud prevention, dispute resolution, or legal compliance.

Data retention

We retain personal information only as long as needed for the purposes described in this Policy, including providing the Service, maintaining security logs, meeting legal and accounting obligations, and resolving disputes.

Account data is generally retained while your account remains active and for a reasonable period afterward for backup, audit, and legal hold purposes. Analytics and operational logs are retained on rolling schedules appropriate to security and product improvement. When retention is no longer required, we delete or de-identify data in accordance with our operational practices.

Third-party processors

We use carefully selected service providers to operate the Service. Categories may include hosting and infrastructure, databases, authentication, analytics, email delivery, customer support tooling, payment and checkout processors, and licensed or public market-data providers.

Processors are engaged to provide services on our behalf and are expected to protect personal information consistent with this Policy and applicable law. Independent data providers and embedded third parties process information under their own policies when you interact with their services directly.

We do not permit processors to use personal information for their own unrelated marketing except as disclosed in their policies or required to deliver the contracted service.

Security and international transfers

We implement technical and organizational measures designed to protect personal information against unauthorized access, loss, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Personal information may be processed in the United States and other countries where we or our processors operate. Where required, we use appropriate transfer safeguards.

Changes and contact

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest revision. Continued use of the Service after changes become effective constitutes acceptance of the revised Policy where permitted by law.

Privacy requests and questions: hello@greyrabbitmarkets.com. Additional channels are listed on the Contact page.