Privacy Policy
Last updated: August 1, 2026
This Privacy Policy explains what information StockDNA ("we", "us", or "our") collects, how we use it, and the choices you have. By using StockDNA (the "Service"), you agree to the collection and use of information as described here.
1. Information We Collect
Account information. When you sign up, we (via Supabase Auth) collect your email address and, if you sign in with Google, basic profile information (name, email, profile photo) provided by Google. Passwords are hashed and never visible to us in plaintext.
Billing information. If you subscribe to a paid plan, our payment processor, Lemon Squeezy, collects and processes your payment details as merchant of record. We do not store your card number; we receive subscription status and plan metadata from Lemon Squeezy.
Usage data. We track which tickers you look up and how many requests you make in order to enforce per-tier usage limits and improve the Service. We use Vercel Web Analytics for aggregate, privacy-respecting traffic analytics (page views, referrers, and general device/browser info); it does not use cookies and does not track you across sites.
Content you submit. If you contact us by email, we retain that correspondence to respond to and track your request.
2. How We Use Information
- To provide, maintain, and secure the Service, including authenticating your sessions;
- To enforce usage limits associated with your subscription tier;
- To process payments and manage subscriptions;
- To respond to support requests;
- To understand aggregate usage patterns and improve the Service;
- To send essential account and billing notifications (not marketing email, unless you opt in).
3. Third Parties We Share Data With
We do not sell your personal information. We share limited data with the service providers that power StockDNA, strictly to operate the Service:
- Supabase — authentication and application database hosting.
- Lemon Squeezy — subscription billing and payment processing.
- Google Gemini (Google AI) — generates the AI explanations shown for a stock; the ticker and relevant financial context are sent to Gemini to produce that explanation.
- Vercel — application hosting, serverless functions, and aggregate web analytics.
Each provider processes data under its own privacy policy and only for the purpose of providing their service to us.
4. Cookies and Local Storage
We use essential cookies/local storage to keep you signed in (via Supabase Auth session tokens) and to remember your display preferences (e.g., light/dark theme). We do not use third-party advertising cookies.
5. Data Retention
We retain account data for as long as your account is active. Aggregated market/warehouse data we compute is retained for a limited rolling window (currently up to 270 days) for historical comparisons, then purged. You may request deletion of your account and associated personal data at any time.
6. Your Rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, or to object to certain processing. To exercise any of these rights, email us at the address below. You can also delete your account directly from your account settings, or unsubscribe from a paid plan through the billing portal.
7. Security
We rely on industry-standard safeguards from our infrastructure providers (encryption in transit, hashed credentials, scoped API keys) to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Children's Privacy
The Service is not directed to children under 16, and we do not knowingly collect data from them.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
10. Contact
Questions about this Privacy Policy or your data? Email us at contact@stockdna.app.