Privacy Policy

We collect minimal data necessary to operate the service:

• Email address and display name (for account creation via Supabase Auth)
• Chat history and analysis queries (stored securely to provide session continuity)
• Usage metrics (message counts, token consumption, tools used, tickers analyzed)
• IP address and user agent (for rate limiting and abuse prevention)

Passwords are managed by Supabase Auth and are never stored in plaintext by our application.

We use browser local storage to persist your authentication session (Supabase JWT token). This enables instant page loads without re-authentication. We do not use tracking cookies, advertising cookies, or third-party analytics.

• To authenticate your identity and maintain your session
• To provide personalized chat history and analysis results
• To enforce usage quotas and prevent abuse
• To improve service reliability and performance
• To track tool usage and costs for service monitoring

We never sell, rent, or share your personal data with third parties. Your queries are processed by AI models (DeepSeek, OpenAI) to generate analysis. We may share aggregated, anonymized usage statistics for service improvement.

• Account data: stored until you delete your account
• Chat conversations: retained for 90 days, then automatically deleted
• Audit logs: retained for 90 days for debugging and security
• Analysis cache: automatically expired after 24-72 hours

Authentication is handled by Supabase with industry-standard JWT tokens and PKCE OAuth flow. All communication uses HTTPS/TLS encryption. Sensitive fields in audit logs are automatically redacted. We follow security best practices for data storage and access control.

You have the right to:

• Request access to your stored data
• Request deletion of your account and all associated data
• Export your chat history
• Opt out of non-essential data collection

For privacy-related inquiries, please contact us through the support channels listed on our website.