Privacy Policy

StockInfo (stockinfo.net) is operated by H. Sheikh("we", "us"), a UK-based sole trader. This policy explains what personal data we collect when you use StockInfo, why we collect it, who we share it with, and the choices and rights you have over it.

1. Who this policy covers

This policy applies to everyone who visits stockinfo.net or creates an account, wherever you're located, including visitors in the UK, the EU, and the United States. Where a right described below only exists under a specific law (for example UK/EU GDPR or a US state privacy law), we say so.

2. Data we collect

We collect the following categories of personal data:

• Account data — when you sign in with Google, Microsoft, or Yahoo, we receive your name, email address, and profile picture from that provider. We never see or store your password for these providers.
• Profile data — display name, username, marketing communication preferences, currency preference, and your referral code.
• Billing data — if you subscribe to a paid plan, Stripe processes your payment details directly; we only receive and store a Stripe customer/subscription reference, never your full card number.
• Portfolio and watchlist data — tickers you add to a watchlist, and any holdings, quantities, or cost-basis figures you enter into Portfolio Desk.
• Brokerage connection data — if you choose to connect a Trading212 account, your API key and secret are encrypted (AES-256-GCM) before being stored, and are only decrypted in memory to sync your positions.
• Usage data — reports and tickers you look up, and searches you run, so we can show you your recent activity and report library.
• Technical data — your IP address, used only transiently to limit signup abuse (a maximum number of new accounts per IP address per day). This check runs in server memory and is not written to a database or kept beyond that rolling window.

3. How we use your data

• To create and maintain your account and let you sign in.
• To generate stock reports, watchlists, and portfolio analysis for you.
• To process subscription payments and manage billing.
• To detect and limit abuse, such as automated mass account creation.
• To send you service messages, and marketing messages only if you've opted in.
• To respond to support requests you send us.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Who we share data with

We share personal data with the following processors, only as needed to run the service:

• Google, Microsoft, and Yahoo — as your chosen sign-in provider(s).
• Stripe — to process subscription payments.
• Anthropic— if you use the Super Analyst AI feature, a summary of your portfolio (e.g. holding count, top/worst performers, concentration score) is sent to Anthropic's API to generate that analysis. Your brokerage credentials are never included in this data.
• Market and financial data providers (e.g. Yahoo Finance, SEC EDGAR, and similar sources) — we send them ticker symbols to fetch public market data; we do not send them your personal data.

Some of these providers are based outside the UK/EEA, including in the United States. Where personal data is transferred internationally, we rely on the provider's own standard contractual clauses or an equivalent legal safeguard.

5. Cookies

We use a small number of strictly necessary cookies to keep you signed in. We do not currently use analytics or advertising cookies. If that changes, we'll update this policy and our cookie banner first.

6. Data retention

We keep your account data for as long as your account is active. If you ask us to delete your account, we delete your profile, portfolio, watchlist, and brokerage-connection data; Stripe retains billing records separately as required by tax law.

7. Your rights

If you're in the UK or EU, UK/EU GDPR gives you the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

If you're a resident of a US state with its own privacy law (for example California, Colorado, Connecticut, or Virginia), you have similar rights to know what data we hold, request its deletion, and correct it. We do not sell personal information or share it for cross-context behavioural advertising, so there is no "opt-out of sale" needed.

To exercise any of these rights, email hello@stockinfo.net. We currently handle account deletion and data requests manually rather than through a self-service button — we aim to respond within 30 days.

8. Children

StockInfo is not directed at, and must not be used by, anyone under 18.

9. Security

We use industry-standard measures to protect your data, including encryption of brokerage credentials at rest and encrypted connections (HTTPS) between your browser and our servers. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. We'll change the "last updated" date above, and if the change is significant, we'll let signed-in users know.

11. Contact us

Questions about this policy or your data? Email hello@stockinfo.net.