1. Introduction
deepstack ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial research platform.
2. Information We Collect
2.1 Account Information
- Email address (for authentication)
- Display name (optional)
- Authentication tokens from third-party providers (Google, GitHub)
2.2 Usage Data
- Watchlists and symbol preferences
- Paper trading journal entries
- Thesis and analysis documents you create
- Chat conversation history with AI
- Price alert configurations
2.3 Technical Data
- IP address and approximate location
- Browser type and version
- Device information
- Pages visited and features used
3. How We Use Your Information
- Provide the Service: To deliver personalized market analysis and portfolio tracking
- Improve the Service: To understand usage patterns and enhance features
- Communication: To send service updates and respond to inquiries
- Security: To detect and prevent fraud or unauthorized access
- Legal Compliance: To comply with applicable laws and regulations
4. What We Do NOT Do
- We do NOT sell your personal information to third parties
- We do NOT share your trading journal or thesis content with other users
- We do NOT access your brokerage accounts or execute trades on your behalf
- We do NOT store actual financial account credentials
5. Data Storage and Security
Your data is stored securely using Supabase, which provides enterprise-grade security including encryption at rest and in transit, row-level security policies, and regular security audits. We implement appropriate technical and organizational measures to protect your personal information.
6. Third-Party Services
We use the following third-party services that may collect data:
- Supabase: Database and authentication
- Vercel: Hosting and analytics
- Alpaca: Market data provider (no personal data shared)
- Anthropic: AI processing (conversations may be processed)
7. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your account and data
- Portability: Request your data in a machine-readable format
- Opt-out: Opt out of marketing communications
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account at any time, after which we will delete your data within 30 days, except where retention is required by law.
9. Cookies
We use essential cookies for authentication and session management. We may also use analytics cookies to understand how the Service is used. You can control cookie preferences through your browser settings.
10. Children's Privacy
deepstack is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@deepstack.app