Privacy Policy

Account information: When you register we collect your name (if provided) and email address. Passwords are stored using bcrypt hashing — we never store your password in plain text.

Portfolio and watchlist data: Stocks, assets, and positions you add to your portfolio or watchlist are stored in our database associated with your account.

Inputs to AI features: When you use AI-powered analysis, chat, or Q&A features your queries and any context you provide are transmitted to our AI provider(s) to generate a response. See Section 4 for details on those providers and how inputs are handled.

Billing information: If you subscribe to Mr. Guy Invests Pro, payment is processed by Stripe. We store only your Stripe customer ID and subscription status — we never see or store your full card number.

Usage analytics: We collect information about how you interact with the Service in two ways. Vercel Analytics collects anonymised, cookieless page-view data. Additionally, for logged-in users, we record page visits in our own database (the pages you navigate to, timestamps, and your account ID) to understand feature usage and improve the product.

Onboarding survey responses: When you first sign up, we ask about your investing experience level and goals. These responses are stored anonymously — they are not linked to your account — and are used only for aggregate product analytics. Because they are not linked to you, they cannot be attributed to your account and are not removed when you delete your account.

IP address and device data: Our servers and hosting provider automatically record your IP address, browser type, operating system, and referring URL as part of standard web server logs. This data is used for security, fraud prevention, and aggregate analytics.

Session cookies: We use secure session cookies required for authentication. See Section 6 for details.

What we do not collect: We do not collect Social Security numbers, government-issued ID numbers, brokerage account credentials, or any other sensitive financial account identifiers.

Vercel — cloud hosting, deployment, and infrastructure. Vercel processes server logs including IP addresses. Vercel Analytics and Speed Insights collect anonymised page-view and performance data.

Neon / PostgreSQL — managed database hosting. Your account data, portfolio data, and watchlist data are stored here.

Stripe — payment processing and subscription management. When you subscribe, your payment details are submitted directly to Stripe. We receive only a customer ID and subscription status. Stripe's privacy policy governs all payment data.

Resend — transactional email delivery. Your email address is shared with Resend solely to deliver emails we send you (verification links, password resets, subscription notices).

Anthropic Claude API — AI-generated analysis and responses. Queries you submit to AI features are sent to Anthropic's servers for processing. We do not store your AI inputs beyond the current session; Anthropic may retain inputs subject to their own data retention policies.

xAI (Grok API) — AI-generated features. Certain AI features route queries through xAI's servers. The same session-only retention policy applies on our end; xAI's policies govern their handling.

DeepSeek API — AI-generated analysis. Certain AI analysis features route queries through DeepSeek's servers. DeepSeek is operated by a Chinese company and is subject to Chinese data laws, which may include government access to data. The same session-only retention applies on our end; DeepSeek's policies govern their handling. EEA/UK users should be aware that no EU adequacy decision exists for China.

Third-party market data providers and SEC EDGAR — stock prices, financial data, and public regulatory filings. These are read-only data sources; we do not share your personal information with them.

Delete your account: You may request deletion of your account and all associated personal data at any time. We will process the request within 30 days.

Export your data: You may request a copy of the personal data we hold about you in a portable, machine-readable format.

Opt out of analytics: You may opt out of usage analytics collection by contacting us. Note that strictly necessary session cookies required for authentication cannot be disabled without affecting your ability to sign in.

Access and correction: You may request access to your personal data or ask us to correct inaccurate information.

GDPR (EEA / UK) rights: If you are located in the European Economic Area or United Kingdom, you have rights under the GDPR including the right to access, rectify, erase, restrict processing, and object to processing of your personal data, as well as the right to data portability.

CCPA (California) rights: California residents have the right to know what personal information we collect and how it is used, the right to delete personal information, and the right to opt out of sale of personal information. We do not sell personal information.