Privacy Policy

1. What we collect

• Account: your email address and a password. Passwords are handled by our sign-in provider and stored only in hashed form; we never see them.
• Credits and activity: your credit balance, the stocks you analyze, the depth you choose, when you run them, and the reports saved to your history.
• Payments: your plan, its status and renewal date, your Stripe customer ID, and the amount, date, and credits of each purchase. Card details are collected and stored by Stripe, never by us.
• Technical: your IP address is used briefly to limit abuse (for example, how many analyses can start per hour) and may appear in our hosting providers' server logs. Sign-up and log-in include a bot check that processes basic device and browser signals.
• On your device: your browser stores your sign-in session, your preferred analysis depth, and (if you aren't signed in) reports you've viewed. These stay in your browser; reports stored there move into your account the first time you sign in.

2. How we use it

• To create and secure your account, verify your email, and sign you in.
• To run analyses, keep track of credits, and save your reports.
• To process payments and subscriptions, and keep the records tax and accounting rules require.
• To prevent abuse, fraud, and runaway costs, and to fix problems.
• To send emails you need, such as verification and password resets. We don't send marketing emails without your consent.

3. Who processes it for us

We use these service providers, each only for its part of running Stock Council:

• Supabase: sign-in, email verification, and our database (accounts, credits, saved reports).
• Stripe: payments, subscriptions, invoices, and sales tax. Stripe may act as the seller of record for purchases; its own privacy policy covers the payment information it collects.
• Cloudflare: hosting the website and the bot check on sign-up and log-in.
• Render: hosting the server that runs analyses.
• Anthropic: the AI models that write the analyses. They receive the stock ticker and public market data only, not your name, email, or account details.

These providers may store or process data outside your province or country, including in the United States, where it may be accessible to authorities under local law. We don't sell or rent personal information to anyone.

4. What other users can see

Reports are about public companies, not about you, and a report generated for a stock may be shown to other users who open that stock shortly afterward. Reports never show who ran them. Your account, email, credits, purchases, and history list are private.

5. How long we keep it

• Account data and saved reports: while your account is open. You can delete saved reports from your History at any time.
• Payment and purchase records: as long as tax and accounting laws require (in Canada, generally six years), even after an account is closed.
• Server logs: kept by our hosting providers for a limited time for security and troubleshooting.

6. Your choices and rights

You can ask to see the personal information we hold about you, correct it, or delete your account. Deleting your account removes your email, credits, and saved history, except records we must keep by law. Cancel any subscription before deleting your account. You can also withdraw consent to optional processing at any time. If you're not satisfied with our response, you can complain to the privacy regulator where you live (in Canada, the Office of the Privacy Commissioner of Canada).

To make a request: Email us at stockcouncil.help@gmail.com. We'll respond within 30 days.

7. Security

We use encrypted connections, hashed passwords, verified sign-in tokens checked on every request, and access limited to what each part of the service needs. No system is perfectly secure; if a breach affecting your information creates a real risk of harm, we'll notify you and the relevant authorities as the law requires.

8. Children

Stock Council is not for anyone under 18, and we don't knowingly collect information from children.

9. Changes to this policy

If we change this policy in a meaningful way, we'll update the date above and, for significant changes, let account holders know.