Privacy Policy
Version 2026-07-01 · Last updated July 1, 2026
1. Introduction
SharesLocker ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (the "Service").
2. Information We Collect
We collect the following categories of information: • Account data: email address, name, hashed password, OAuth identifiers (e.g. Google sub). • Usage data: pages viewed, features used, tickers searched, session duration, referrer, device and browser metadata. • Payment data: Stripe customer ID and subscription status. We never receive or store full card numbers. • Consent data: timestamp, IP address, user-agent and version of the legal documents you accept.
3. How We Use Your Information
We use your data to (a) provide and secure the Service, (b) process subscription payments, (c) send transactional and — with your permission — marketing email, (d) improve product features based on aggregated analytics, and (e) comply with legal obligations.
4. Sharing and Sub-Processors
We share limited data with sub-processors that operate the Service, including: Vercel/Railway (hosting), Neon/Postgres (database), Stripe (payments), Finnhub (market data), Resend (email), and our LLM providers (Anthropic, OpenAI, Google, DeepSeek). We do not sell your personal data.
5. Data Retention
We retain account data for as long as your account is active plus a reasonable period afterwards for legal, tax and audit purposes. You may request deletion at any time by emailing support.
6. Your Rights
Subject to applicable law (including GDPR and CCPA), you may access, correct, export or delete your personal information, object to processing, and withdraw consent. Contact us to exercise these rights.
7. Cookies
We use strictly necessary cookies for authentication and, where enabled, analytics cookies to measure product usage. You can control non-essential cookies via your browser settings.
8. Security
We use TLS in transit, encryption at rest for sensitive columns, hashed passwords, and role-based access controls. No system is 100% secure; you use the Service at your own risk.
9. Children
The Service is not directed to children under 16. We do not knowingly collect personal information from minors.
10. Changes to this Policy
We may update this Policy. Material changes will be notified via email or an in-app banner, and you will be asked to re-accept before continuing to use the Service.
11. Contact
Questions? Contact privacy@shareslocker.com.