Privacy Policy

We collect only what we need to operate the Service:

• Account information. When you sign in with Google, we receive your email address, name, and profile picture from Google. When you create an email/password account, we store your email address and a securely hashed password (never the plaintext).
• Usage analytics. Via Google Analytics (GA4) and Microsoft Clarity we collect how you interact with the Service — pages viewed, features used, and conversion events (e.g. sign-in, opening insight detail). Microsoft Clarity also records how you interact with our pages — clicks, taps, scrolling, and mouse movement — as session recordings and heatmaps, together with your device, browser, and approximate location. This helps us understand and improve the product.
• Technical data. Standard server and analytics logs capture your IP address, approximate region, device type, browser, and operating system.
• Questions you ask the assistant. When you type a question into Ask, we keep the question and the stock it was asked about, without your account, email, or IP address, for up to 30 days, to measure and improve the quality of answers.
• Subscription & payment data. If you subscribe to a paid plan, payment is processed by Stripe. Stripe collects and handles your card details directly — we do not receive or store full card numbers. We receive subscription status (plan, active/canceled) and a Stripe customer identifier to grant the right access tier.

• Provide, maintain, and secure the Service and your account.
• Authenticate you and remember your session and access tier.
• Process subscriptions and grant paid features.
• Measure and improve the product — which features are used, where the experience can be better, and how the funnel converts.
• Communicate with you about your account (verification, password reset, service or billing notices).
• Detect, prevent, and address abuse, fraud, or technical issues.

We do not sell your personal information.

We rely on a small number of trusted providers, each governed by its own privacy policy:

• Google — Sign-In (OAuth) and Google Analytics (GA4). Google Privacy Policy.
• Microsoft — Microsoft Clarity, for user-experience analytics, session recordings, and heatmaps. Microsoft Clarity Terms of Use and Microsoft Privacy Statement.
• Stripe — subscription billing and payment processing. Stripe Privacy Policy.

These providers process data on our behalf to deliver their part of the Service; we share only what each needs to function.

We keep account information for as long as your account is active. Analytics data is retained per the standard retention settings of Google Analytics and Microsoft Clarity. Questions typed into Ask are kept for up to 30 days, without account identifiers, and then deleted. If you delete your account, we remove or anonymize your personal information within a reasonable period, except where we must retain limited records to meet legal, tax, accounting, or security obligations (for example, billing records held by Stripe).

You can request to access, correct, export, or delete the personal information we hold about you. You may also object to or restrict certain processing, and opt out of analytics (see Cookies below). To exercise any of these rights, email support@stockmap.io and we will respond within a reasonable timeframe. Deleting your account removes your profile and login credentials from our systems.

We use cookies and similar technologies to keep you signed in, remember preferences, and power Google Analytics and Microsoft Clarity. Essential cookies are required for the Service to work; analytics cookies help us understand usage. Microsoft Clarity sets its own analytics cookies (_clck, _clsk) to keep its user and session state for recordings and heatmaps. You can block or delete cookies in your browser settings — some features (like staying signed in) may not work correctly if you do.

We use industry-standard measures to protect your information, including HTTPS everywhere, hashed passwords, and scoped access to production systems. No method of transmission or storage is perfectly secure, but we work to protect your data and promptly address issues.

StockMap is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notice within the Service. Your continued use after an update means you accept the revised policy.

For any privacy question or request, email support@stockmap.io.