Privacy Policy

StockAura ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service"). Please read this policy carefully. By using our Service, you consent to the practices described in this Privacy Policy.

1.1 Information You Provide

• Account Information: Name, email address, password (encrypted)
• Profile Information: Username, profile preferences
• Payment Information: Billing address, payment method details (processed securely by Stripe)
• Communications: Feedback, support requests, survey responses
• User Content: Watchlists, alerts, chat messages with AI assistant

1.2 Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns
• Log Data: IP address, access times, referring URLs
• Location Data: Approximate location based on IP address

1.3 Information from Third Parties

• OAuth Providers: If you sign in with Google, we receive your name and email
• Analytics Services: Aggregated usage data from PostHog and Sentry

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send price alerts, earnings notifications, and other requested communications
• Respond to your comments, questions, and support requests
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address technical issues and security threats
• Personalize your experience and provide tailored content
• Enforce our Terms of Service and other policies
• Comply with legal obligations

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

• Stripe: Payment processing
• Resend: Email delivery for alerts and notifications
• Vercel: Hosting and infrastructure
• PostHog: Product analytics
• Sentry: Error monitoring and debugging
• Google (Gemini API): AI assistant functionality

3.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

3.3 Business Transfers

If StockAura is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

We implement appropriate technical and organizational measures to protect your personal information:

• All data is transmitted over HTTPS with TLS encryption
• Passwords are hashed using bcrypt with salt
• Payment information is handled by PCI-compliant Stripe
• Database access is restricted and monitored
• Regular security audits and vulnerability assessments
• Employee access to personal data is limited on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We use cookies and similar tracking technologies to collect and track information about your use of our Service:

5.1 Types of Cookies

• Essential Cookies: Required for basic functionality (authentication, security)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how you use our Service

5.2 Your Choices

Most web browsers allow you to control cookies through their settings. However, disabling cookies may limit your ability to use certain features of our Service.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Opt-Out: Unsubscribe from marketing communications
• Withdraw Consent: Withdraw previously given consent

To exercise these rights, please contact us at privacy@stockaura.com.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain certain information by law.

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights

We do not sell your personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: