Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account Data: Email address and display name collected via Firebase Authentication (Google Sign-In or email/password).
• Usage Data: Pages visited, features used, and interaction timestamps (collected anonymously via Firebase Analytics).
• Watchlist & Portfolio Data: Tickers, position sizes, and notes you enter, stored in Firebase Firestore associated with your user ID.
• Broker Credentials: If you connect an Alpaca Markets account, your API keys are stored encrypted in memory only for the duration of your session. They are not persisted to any database by us.
• Log Data: IP addresses, browser type, and timestamps collected automatically by our hosting provider (Vercel).

2. How We Use Your Information

We use the information we collect to:

• Authenticate you and maintain your session
• Store and retrieve your watchlists and portfolio data across devices
• Deliver personalised market signals and screener results
• Monitor platform stability and debug technical issues
• Improve the Platform through aggregated, anonymised analytics

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

The Platform integrates with the following third-party services, each governed by their own privacy policies:

• Firebase / Google: Authentication and database — Google Privacy Policy
• Yahoo Finance: Market data API — data is fetched server-side; no user PII is shared
• Finnhub: Company news and fundamentals — Finnhub Privacy Policy
• Alpaca Markets: Brokerage integration (optional) — Alpaca Privacy Policy
• Vercel: Hosting and edge network — Vercel Privacy Policy
• OpenAI: AI prediction engine — OpenAI Privacy Policy

4. Data Security

We implement commercially reasonable security measures to protect your information, including HTTPS encryption for all data in transit, Firebase security rules restricting database access to authenticated users, and server-side API key management. However, no method of transmission over the internet or electronic storage is 100% secure.

5. Data Retention

We retain your account data and watchlist/portfolio data for as long as your account is active. You may delete your account at any time by contacting us, which will permanently delete all associated data from Firebase within 30 days.

6. Cookies

The Platform uses essential cookies to maintain authentication sessions via Firebase. We do not use third-party advertising cookies or tracking pixels. Browser local storage is used to save your UI preferences (e.g., theme, currency selection).

7. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict certain processing of your data
• Data portability (export your watchlist/portfolio data)
• Withdraw consent at any time

To exercise any of these rights, contact us at the support email below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date.