Thank you for using TradingLens. This Privacy Policy explains how we collect, use, and protect your personal information when you use our AI-powered stock analysis platform and related services.

1. Information We Collect

1.1 Personal Information

When you use our services, we collect the following personal information:

• Email Address: Used for account registration, authentication, and sending important service notifications. We use Supabase's secure authentication service.
• Display Name (Optional): To personalize your user experience and communications.
• Profile Picture (Optional): Automatically obtained when using third-party OAuth login (such as Google) for interface personalization.

1.2 Usage Data

To provide better services, we collect and store:

• Stock Watchlists: Stock symbols you follow, notes, and timestamps for personalized stock tracking.
• Portfolio Information: Investment portfolios you create, including stock holdings, purchase prices, and quantities for analysis and recommendations.
• Chat History: Conversations with our AI assistant to provide continuity and improve service quality.
• Browsing History: Stock pages you visit for personalized recommendations and improved user experience.
• User Feedback: Your ratings and feedback on AI analysis results to continuously improve our services.

1.3 Technical Information

We may use cookies and similar technologies to collect non-personal information, including:

• IP addresses, browser types, device information, and usage patterns
• Page visit times, session duration, and interaction behavior
• System performance data and error logs for service improvement

2. How We Use Your Information

We use the collected information to:

• Provide stock data queries and AI-powered analysis services
• Maintain your investment portfolios and watchlists
• Generate personalized investment recommendations and market insights
• Process your conversations with our AI assistant
• Send account-related notifications and service updates
• Improve our AI models and analysis algorithms
• Provide customer support and technical assistance
• Prevent fraud and ensure platform security
• Comply with applicable legal and regulatory requirements

3. Third-Party Services and Data Processing

To provide quality services, we partner with trusted third-party service providers:

• Supabase: User authentication, data storage, and real-time data synchronization.
• Financial Modeling Prep (FMP): Real-time stock data, financial data, and market analysis.
• AI Service Providers: Including DeepSeek, OpenAI, and Anthropic for stock analysis and intelligent conversation features.
• Vercel: Website hosting and CDN acceleration services.

These service providers process your data only to the extent necessary for providing services, and we require them to adhere to strict data protection standards.

4. Artificial Intelligence and Machine Learning

Our platform uses artificial intelligence technology to provide the following services:

• Stock Analysis: AI models analyze stock data to generate investment recommendations and risk assessments.
• Intelligent Conversations: AI assistant answers your investment-related questions and provides personalized advice.
• Portfolio Optimization: AI-driven optimization recommendations based on your investment portfolios.
• Market Insights: Machine learning analysis of market trends and sentiment data.

Your conversation data may be used to improve AI model performance, but all data is anonymized and processed in a way that does not reveal your personal identity.

5. Data Security

We implement appropriate security measures to protect your personal information:

• Industry-standard encryption for data transmission and storage
• Regular security audits and vulnerability assessments
• Restricted employee access to personal data on a need-to-know basis
• Strict data access controls and audit logging
• Regular data backups to prevent data loss

However, please note that no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Under applicable data protection laws (including GDPR and CCPA), you have the right to:

• Access: Request information about the personal data we hold about you
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal information ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Object to or restrict processing of your information
• Withdrawal: Withdraw consent for data processing where applicable
• Opt-out: Opt-out of the sale of personal information (CCPA)

To exercise these rights, please contact us using the information provided at the end of this policy. We will respond to your request within 30 days (or as required by applicable law).

7. Data Retention

We retain your personal information only as long as necessary to provide our services:

• Account Information: While your account remains active
• Portfolios and Watchlists: Until you actively delete them
• Chat History: Maximum of 2 years for AI service improvement
• Log Data: Typically 90 days for system maintenance and troubleshooting

When data is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

8. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place to protect your data during such transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Other legally recognized transfer mechanisms

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Provide personalized content and recommendations
• Ensure website security and prevent fraud

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of our services.

10. Children's Privacy

Our services are not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect and how it's used
• Right to delete personal information we have collected
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

12. European Union Rights (GDPR)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation:

• Right to object to processing based on legitimate interests
• Right to lodge a complaint with your local data protection authority
• Right to withdraw consent where processing is based on consent
• Right to data portability in machine-readable format

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of significant changes by:

• Posting a prominent notice on our website
• Sending an email to your registered email address
• Providing in-app notifications

We encourage you to review this policy periodically to stay informed about how we protect your information.