Privacy Policy
Last updated: June 24, 2026
1. Who we are
2. Data we collect
- Account data — your name, email address, and (for email/password sign-in) a securely hashed password; or, if you use Google or Microsoft sign-in, the name, email, and profile image they provide.
- Subscription & billing data — your subscription status, plan, trial and renewal dates, and a payment-processor customer/subscription identifier. We do not collect or store your full card number — card details are entered directly with our payment processor (Stripe). We may receive limited billing metadata (such as card brand, last four digits, and country) from Stripe.
- Your content — watchlists, portfolios, alerts, profile preferences, notes, and any community posts you create.
- Usage data — pages and features used, and interactions, to operate, secure, and improve the Service (including aggregate analytics).
- Technical data — IP address, device and browser information, and similar identifiers, used for security, fraud and abuse prevention, and rate limiting.
- Communications — messages you send us (e.g. support, feedback, contact forms) and your email preferences.
3. How we use your data and our legal bases
- To provide, maintain, and personalize the Service and sync your data across devices — performance of a contract.
- To process subscriptions, trials, renewals, and payments, and to prevent payment fraud — performance of a contract and legitimate interests.
- To secure the Service, enforce our Terms, and prevent abuse — legitimate interests.
- To send transactional and service messages (e.g. verification, billing, trial reminders, and, if you opt in, the daily briefing) — contract and consent where required.
- To analyze and improve the Service — legitimate interests or consent where required.
- To comply with legal obligations and respond to lawful requests — legal obligation.
4. Payments (Stripe)
5. Who we share data with
We share personal data only with service providers (“processors”) that help us run the Service, under contracts that require them to protect it:
- Authentication — Google, Microsoft (if you use their sign-in).
- Hosting & database — Vercel; Neon (Postgres).
- Payments — Stripe.
- Email delivery — our transactional email provider.
- Analytics — Vercel Analytics & Speed Insights, and Google Analytics (Google LLC). These run only after you accept analytics cookies in our consent banner.
- Affiliate tracking — Tolt, to attribute sign-ups that arrive through an affiliate or referral link so the referrer can be credited.
- AI features — our AI model provider processes the inputs needed to generate investment theses and similar output; we do not send it your payment data.
- Security — rate-limiting and abuse-prevention infrastructure.
We may also disclose data to comply with law, enforce our Terms, protect rights and safety, or in connection with a merger, acquisition, or sale of assets. We do not sell your personal data, and we do not “share” it for cross-context behavioral advertising as those terms are defined under California law.
6. Cookies and similar technologies
- Strictly necessary — for authentication, session management, and security. These are always on; disabling them may break sign-in.
- Analytics — Vercel Analytics, Speed Insights and Google Analytics, set only if you choose “Accept all” in our cookie banner. Choose “Necessary only” and they are not loaded.
- Affiliate / referral — when you arrive through an affiliate or referral link, we store an identifier (for up to 360 days) so the correct partner is credited if you subscribe.
You can change your choice at any time by clearing the tq-cookie-consent cookie (or your site data) and reloading, and you can control cookies through your browser settings. We honour the Global Privacy Control (GPC) signal as a valid opt-out of non-essential analytics where applicable.
7. Data retention
8. Security
9. International transfers
10. Your rights
Subject to applicable law, you may:
- access, correct, update, or delete your personal data;
- port (export) your data, and object to or restrict certain processing;
- withdraw consent at any time (without affecting prior processing);
- opt out of non-essential emails via the unsubscribe link or your settings;
- (California residents) request disclosure or deletion of personal information and not be discriminated against for exercising your rights; we do not sell your data;
- lodge a complaint with your local data-protection authority.
To exercise any right, or to close your account and delete your data, use the controls in your profile or contact us below. We may need to verify your identity first.
