Privacy Policy

1. Introduction

StockMind (“we,” “our,” or “us”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding that data when you use our website and AI equity analysis service.

By using StockMind you agree to the practices described in this policy. If you do not agree, please do not use the service.

2. Information We Collect

Account information

When you create an account we collect your name, email address, and a hashed (never plain-text) version of your password.

Usage data

We collect the messages you send to the AI chat, the analyses you request, and general usage patterns (pages visited, features used) to improve the service.

Payment information

Payments are processed by Stripe. We do not store your card number, expiry, or CVV on our servers. We receive a Stripe customer ID and subscription status only.

Technical data

IP address, browser type, device type, and session identifiers collected automatically when you access the service.

3. How We Use Your Information

• To provide and operate the StockMind AI analysis service
• To send transactional emails (account verification, billing receipts)
• To process payments and manage subscriptions
• To improve the accuracy and quality of AI responses
• To detect and prevent fraud or abuse
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising.

4. Data Retention

Account data is retained for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

Chat and analysis history is retained for 12 months to improve AI response quality, after which it is anonymised or deleted.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability (receive your data in a machine-readable format)

To exercise any of these rights, contact us at the address below.

6. Security

We use industry-standard measures including bcrypt password hashing, HTTPS encryption in transit, and httpOnly cookies for session tokens. No system is 100% secure — if you believe your account has been compromised, contact us immediately.

7. Third-Party Services

We use third-party subprocessors to operate the service. See our Data Use page for a full list and the role each plays.

8. Changes to This Policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top and, for material changes, notify you by email.

Contact