Privacy Policy

Account information: the email address you provide at sign-up (we use email as your identity).

Watchlist & preferences: your watchlist is stored on our servers and linked to your email account (for cross-device sync and push alerts), with a copy kept in your browser's local storage; your language preference is stored in a cookie named lang.

Push & notifications: if you enable mobile push, we store your push subscription — the web-push endpoint and encryption key material, or your iOS device token (APNs token) — along with the title, body and destination link of notifications already sent (kept about 48 hours, to avoid duplicate pushes and to support tap-through).

Verification codes: for email sign-in we store a hash of the code (never the code itself) and the attempt count; it expires after 10 minutes.

Payment information: subscription payments are processed by Stripe (web checkout) or the Apple App Store (iOS in-app purchase). We never touch or store your full card number — card details go directly to Stripe or Apple. We only receive what is needed to maintain your entitlement, such as subscription status, billing period, and — for Apple — transaction identifiers and subscription status notifications; we never receive your Apple ID or payment account details.

Activity record: we store the time your account last used the Service, to identify inactive accounts and operate the Service.

Technical logs: our host, Vercel, records standard server and access logs (such as IP, timestamp, request path, and user agent) for operations, troubleshooting, and abuse prevention.

To provide and maintain the Service (e.g., sync your watchlist, send news alerts); to process subscriptions and billing; to communicate with you about the Service; to ensure security, troubleshoot, and prevent abuse; and to meet legal obligations where required.

We do not sell your personal information.

Stripe — web payment and subscription processing.

Apple App Store — iOS in-app purchases and subscription management; we query and receive your subscription status through the App Store Server API.

Vercel — application hosting, logs and data storage (including Blob storage; account, watchlist and push data are kept in an access-restricted private store).

Anthropic (Claude) — news impact-chain analysis. We send news headlines and public market data; we do not send your email, your watchlist, or any personally identifying information.

Resend — delivery of sign-in codes and account-related email (it processes your email address).

Apple Push Notification service (APNs) and browser push services (e.g. Google FCM, Mozilla, Apple) — delivery of the push notifications you subscribe to.

Market, news and public data sources — including Yahoo Finance, Nasdaq, SEC EDGAR, FINRA, the Federal Reserve, the Bureau of Labor Statistics (BLS) and the FDA, Polymarket (market-implied probabilities), OKX (public crypto-derivatives data), and licensed news-data providers. These requests contain only ticker symbols and public market information — never your personal information.

These third parties process data only as needed to provide their services to us and are governed by their own privacy policies.

We use a minimal set of cookies. Currently this is mainly the lang cookie for your language preference, plus cookies necessary for login/session. We do not use third-party advertising trackers.

We retain your account and subscription information for as long as your account exists.

You can delete your account directly from the account page. Deletion immediately removes your account, watchlist, push subscriptions and notification history, and we verify that nothing remains; if deletion cannot be completed, we tell you so rather than claiming it succeeded. Our host's server logs expire on their own retention schedule. Transaction records we must keep for legal, financial or tax purposes are excepted.

Subscriptions started through the App Store are managed by Apple: deleting your account does not cancel them — cancel in your Apple account's subscription settings. Subscriptions started on the web are canceled when you delete your account. Watchlist data stored locally in your browser can be cleared by you at any time.

You have the right to access, correct, or delete your personal information, and to request an export of your data. Email support@newstock.ai to make a request, and we will handle it within a reasonable time. Depending on where you live, you may have additional rights under local law (such as GDPR or CCPA).

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe we have inadvertently collected such information, please contact us to have it removed.

We may update this policy from time to time. Material changes will be announced through the Service or by email, and we will update the effective date at the top.

For any privacy question or request, contact support@newstock.ai.