Privacy policy

What we collect, why, and the choices you have.

Last updated: November 2026. Have a lawyer review this policy and add your company name and address as the data controller.

What we collect

• Account data: your username, email address and password (stored only as a salted hash). If you sign in with Google, we receive your name and email from Google.
• Your content: your watchlist, alert settings, saved screens and portfolio holdings.
• Billing data: if you subscribe, Stripe processes your payment. We store only your Stripe customer and subscription IDs and your plan status, never your card number.
• Technical data: standard server logs such as IP address and browser type.

How we use it

To run the service, show your saved data, send account and alert emails, process payments, keep the site secure and fix problems. We also use account-linked milestone events to measure sign-up, first valuation, saves and subscription progress. These events do not include company tickers, valuation inputs or portfolio contents. We do not sell your personal data and we do not use it for advertising.

Funnel events are used only for aggregate staff reporting and are removed after 180 days by a scheduled cleanup task. Deleting your account also deletes its events.

Legal basis

We process your data to provide the service you asked for (contract), to keep it secure and improve it (legitimate interests), and to meet legal obligations such as tax records for payments.

Cookies

We use only essential cookies: a session cookie that keeps you logged in and a security (CSRF) cookie. Funnel measurement is server-side and does not use analytics cookies. If that changes, we will ask for your consent first.

Sharing

We use these providers to run the site, and they process data only on our behalf: our hosting provider (Railway), Stripe (payments), our email delivery provider (Resend), and Google if you choose Google sign-in. Some of them are located outside the EEA and UK and rely on standard contractual clauses or equivalent safeguards. We may disclose data if the law requires it.

How long we keep it

We keep your data while your account is open. When you delete your account, we delete your profile, watchlist, alerts, saved screens and portfolio. Payment records may be kept by Stripe and by us for as long as tax law requires. Server logs are kept for a short period.

Your rights

You can ask to see, correct, export or delete your data, object to some processing, and complain to your data protection authority. You can delete your account yourself from your profile page. For anything else, use the contact address given on the site.

Children

The service is not intended for anyone under 18.