Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and a hashed password. If you sign in via Google, we receive your name, email, and profile image from Google.

Usage Data

We use Umami, a privacy-focused analytics tool, to collect anonymous usage data including pages visited, referral source, browser type, and device type. Umami does not use cookies and does not track individual users across sessions.

Subscription Data

If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number, bank account, or other payment details. We receive your Stripe customer ID and subscription status.

2. How We Use Your Information

• To provide and maintain the Service (watchlists, alerts, portfolio tracking)
• To process subscription payments via Stripe
• To send transactional emails (account verification, password reset, alert notifications)
• To improve the Service through anonymous analytics

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on our infrastructure. Passwords are hashed using bcrypt. All connections to the Service are encrypted via HTTPS/TLS. We implement reasonable security measures, but no system is 100% secure.

4. Cookies

We use a minimal session cookie for authentication (next-auth session token). We do not use tracking cookies, advertising cookies, or third-party cookies. Our analytics tool (Umami) is cookieless.

5. Third-Party Services

• Stripe — payment processing (Stripe Privacy Policy)
• Google OAuth — optional sign-in (Google Privacy Policy)
• Umami — privacy-focused analytics (self-hosted, no data shared with third parties)

6. Your Rights

You may:

• Access your account data through your Dashboard
• Update your profile information at any time
• Delete your account by contacting us at the email below
• Request a copy of your data

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymous analytics data may be retained indefinitely.

8. Children

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

10. Contact

Questions about this Privacy Policy may be directed to dave@portcitytechnology.com.