Privacy Policy

1. Information We Collect

We collect the following information:

• Google account data: When you sign in with Google OAuth, we receive your name, email address, and profile picture.
• Portfolio data: Stock holdings, quantities, and purchase prices you enter into the application.
• Watchlist data: Stocks you add to your watchlist along with any notes.
• Preferences: Your chosen base currency, timezone, theme, and locale settings.
• Feedback: Any feedback you submit through the application.

2. How We Use Your Data

Your data is used solely to provide the service functionality:

• Displaying your portfolio holdings with real-time prices and performance
• Calculating dividend projections and income analytics
• Converting currencies based on your preferred base currency
• Generating portfolio analytics and safety scores

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Data Storage & Security

Your data is stored in a PostgreSQL database hosted on Google Cloud SQL. We use industry-standard security measures including encrypted connections and access controls to protect your data. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

4. Third-Party Services

The service integrates with the following third-party services:

• Google OAuth: For authentication. Subject to Google's Privacy Policy.
• Yahoo Finance API: For stock prices, dividend data, and financial metrics. No personal data is sent to Yahoo Finance.
• ECB / Frankfurter API: For currency exchange rates. No personal data is sent to this service.

5. Data Retention

We retain your data for as long as your account is active. Price history and cached market data are retained according to our caching policy (15 minutes to 7 days depending on data type) and are not tied to your personal identity.

6. Your Rights

You have the right to:

• Access your data: All your portfolio and watchlist data is visible within the application. You can export your holdings and dividend history as CSV files.
• Delete your data: You can delete your account and all associated data at any time through the Settings page. This action is permanent and cannot be undone.

7. Cookies

We use a session cookie managed by NextAuth.js to keep you signed in. This is a strictly necessary cookie required for the service to function. We do not use tracking cookies or third-party analytics cookies.

8. Children's Privacy

The service is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting. We encourage you to review this page periodically.

10. Contact

If you have questions about this Privacy Policy, please contact us through the Feedback page accessible within the application.