Legal & privacy

Why we are not financial advice

Individualized financial advice in Spain requires:

• CNMV license (Empresa de Asesoramiento Financiero, EAF, or ESI) or EU equivalent
• Prior client profile analysis (MiFID II test)
• Direct legal responsibility for each recommendation
• Professional liability insurance

BurMarket has none of the four, and consciously does not pursue them under this product model. The choice is deliberate: we want to be a source of information, not an advisor.

That's why:

• You'll never get a "you should buy X" from the app
• Narratives use descriptive, not imperative, language
• Scores are model interpretations, not certified quantitative calculations
• The dip detector classifies events, doesn't issue orders
• We don't have model portfolios, personalized plans, or yield targets

If you want real advice, seek a CNMV-licensed EAF. BurMarket is a complement, not a substitute.

Full disclaimer

Read the full version at /legal/disclaimer. Summary:

BurMarket provides market information and analysis for educational and informational purposes. It does not constitute financial advice, investment recommendation, or an invitation to buy or sell securities. Past performance does not guarantee future results. Investing in financial markets carries risk of loss of invested capital. Before making any investment decision, consult a licensed financial advisor. BurMarket is not responsible for decisions you make based on its information.

Additionally:

• We do not guarantee data accuracy: we depend on external providers (Twelve Data, Marketaux) that may have delays, errors, or gaps.
• We do not guarantee 100% availability: we're a digital service subject to the usual SaaS guarantees.
• We do not guarantee performance: the AI model can be wrong, and it is — the /transparency page reflects this.

How we protect your data

• Hosting: Vercel (EU — Frankfurt) and Supabase (eu-central-1, Frankfurt). Your data is processed in the EU.
• Encryption: strict HTTPS (HSTS 2 years), passwords with bcrypt via Supabase Auth, database connections over TLS.
• Access: only BeachValencia Luxury SL as data controller. We don't sell or share with third parties except subprocessors strictly necessary for operation.

Active subprocessors

Provider	Function	Location	Legal basis
Vercel	App hosting	US (data in EU)	SCCs + EU privacy framework
Supabase	Database + Auth	US (data in EU)	SCCs + EU privacy framework
Twelve Data	Quotes	US	SCCs
Marketaux	News	US	SCCs
Anthropic	AI model (Sonnet)	US	SCCs
Resend	Transactional email	US	SCCs
Stripe	Payments and billing	IE / US	SCCs
IONOS	DNS	EU	N/A

Your GDPR rights

Access, rectification, erasure, portability, objection, restriction. You exercise them from /account (the most common ones) or by email to info@burmarket.com (any of them). We respond within ≤30 days per legal requirement.

Full privacy policy: /legal/privacy. Terms of service: /legal/terms.