Privacy Policy

1. Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile picture from Google OAuth. This information is used solely to identify your account and personalize your experience.

Usage Data

We collect anonymized usage data including pages visited, tickers analyzed, and feature usage. This data helps us improve the Service and is processed via Azure Application Insights.

Watchlists

Watchlist data (names and ticker symbols) that you create is stored in our database and associated with your account. This data is not shared with third parties.

2. How We Use Your Information

• Provide and maintain the Service
• Associate your watchlists and preferences with your account
• Monitor and improve Service performance and reliability
• Communicate important changes to the Service

3. Data Storage and Security

Your data is stored on Microsoft Azure infrastructure in the West US 2 region. We use industry-standard security measures including encrypted connections (TLS), Azure Key Vault for secret management, and parameterized database queries to prevent injection attacks.

4. Third-Party Services

We integrate with the following third-party services:

• Google OAuth — for authentication (subject to Google's Privacy Policy)
• Yahoo Finance — for stock data (no personal data shared)
• Finnhub — for news sentiment data (no personal data shared)
• OpenAI — for AI-generated explanations (no personal data shared; only stock tickers and financial metrics are sent)
• Azure Application Insights — for anonymized performance monitoring

5. Cookies

We use session cookies for authentication (NextAuth.js session tokens). We do not use tracking cookies or advertising cookies.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request deletion of your account and associated data
• Export your watchlist data
• Revoke Google OAuth access at any time

To exercise these rights, contact us via our GitHub repository.

7. Data Retention

Account data is retained for the lifetime of your account. Cached analysis results expire automatically (typically within 1 hour). When you delete your account, all associated data (watchlists, preferences) is permanently removed within 30 days.

8. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service interface. Continued use after changes constitutes acceptance.

10. Contact

For privacy-related questions, please open an issue on our GitHub repository.