Privacy Policy

Account information: the email address you provide at sign-up (we use email as your identity).

Watchlist & preferences: your watchlist is stored on our servers and linked to your email account (for cross-device sync and push alerts), with a copy kept in your browser's local storage; your language preference is stored in a cookie named lang.

Push & notifications: if you enable mobile push, we store your push subscription — the web-push endpoint and encryption key material, or your iOS device token (APNs token) — along with the title, body and destination link of notifications already sent (kept about 48 hours, to avoid duplicate pushes and to support tap-through).

Verification codes: for email sign-in we store a hash of the code (never the code itself) and the attempt count; it expires after 10 minutes.

Payment information: subscription payments are processed by Stripe. We never touch or store your full card number — card details go directly to Stripe. We only receive the subscription details we need, such as status and billing period.

Technical logs: our host, Vercel, records standard server and access logs (such as IP, timestamp, request path, and user agent) for operations, troubleshooting, and abuse prevention.

To provide and maintain the Service (e.g., sync your watchlist, send news alerts); to process subscriptions and billing; to communicate with you about the Service; to ensure security, troubleshoot, and prevent abuse; and to meet legal obligations where required.

We do not sell your personal information.

Stripe — payment and subscription processing.

Vercel — application hosting, logs and data storage (including Blob storage; account, watchlist and push data are kept in an access-restricted private store).

Anthropic (Claude) — news impact-chain analysis. We send news headlines and public market data; we do not send your email, your watchlist, or any personally identifying information.

Resend — delivery of sign-in codes and account-related email (it processes your email address).

Apple Push Notification service (APNs) and browser push services (e.g. Google FCM, Mozilla, Apple) — delivery of the push notifications you subscribe to.

Market data sources (Yahoo Finance, Alpaca, Nasdaq, SEC EDGAR, FINRA) — market data used to generate factors and impact chains; these requests contain no personal information.

These third parties process data only as needed to provide their services to us and are governed by their own privacy policies.

We use a minimal set of cookies. Currently this is mainly the lang cookie for your language preference, plus cookies necessary for login/session. We do not use third-party advertising trackers.

We retain your account and subscription information for as long as your account exists. After you delete your account, we delete or anonymize your personal information within a reasonable period, except where retention is required for legal, financial, or compliance purposes. Watchlist data stored locally in your browser can be cleared by you at any time.

You have the right to access, correct, or delete your personal information, and to request an export of your data. Email support@newstock.ai to make a request, and we will handle it within a reasonable time. Depending on where you live, you may have additional rights under local law (such as GDPR or CCPA).

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe we have inadvertently collected such information, please contact us to have it removed.

We may update this policy from time to time. Material changes will be announced through the Service or by email, and we will update the effective date at the top.

For any privacy question or request, contact support@newstock.ai.