Privacy Policy
⚠️ This is a plain-language template, not legal advice. Have a qualified attorney review and adapt it (especially for GDPR/CCPA obligations and your jurisdiction) before relying on it. Placeholders are in [brackets].
Last updated: [DATE]
What we collect
- Account: your email address and a securely hashed password (we never store your password in plain text).
- Usage: the tickers you look up (to power the "trending" list and your experience) and basic request metadata (e.g. IP address, used for rate limiting and the free daily-lookup counter).
- Billing: if you subscribe, a Stripe customer/subscription ID and your subscription status. Payment card details are handled entirely by Stripe — we never see or store them.
How we use it
To provide and secure the Service, operate your subscription, prevent abuse, and improve the product. We do not sell your personal information.
Third parties we rely on
- Stripe — payment processing (their privacy policy governs card data).
- Market data providers (e.g. Yahoo Finance via yfinance) — to fetch quotes and financials for the tickers you request.
- Hosting & database ([Render], [Neon/Postgres]) — to run the app and store your account and usage data.
Cookies
We use a single essential, httpOnly session cookie to keep you signed in. We don't use third-party advertising or tracking cookies.
Data retention
We keep your account and usage data while your account is active. You can request deletion of your account and associated personal data at any time — email [support email] and we will remove it, subject to any records we must keep for legal/accounting reasons.
Your rights
Depending on where you live (e.g. EU/UK GDPR, California CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. To exercise them, contact [support email].
Security
Passwords are hashed with bcrypt; sessions use signed, httpOnly cookies over HTTPS. No system is perfectly secure, but we take reasonable measures to protect your data.
Children
The Service is not directed to children under 13 (or the applicable age in your jurisdiction) and we do not knowingly collect their data.
Contact
Questions about privacy? [support email].