Privacy Policy
Last updated: 2026-08-12
Stock Compass ("the tool") is a personal investing decision and review tool. This page explains, in plain language, what data we collect, why, where it lives, and what you can do with it.
In one sentence
We collect only what your own features need to run. We do not sell or share your data with advertisers, we never connect to your brokerage account, and we never see your password.
What we collect
Account information
- Your email address (for sign-in and for notifications you opt into)
- Credentials are handled by Supabase Auth. We do not store and cannot see your password. If you sign in with Google, we receive only the email address and basic profile Google provides.
Content you create in the tool
- Watchlist and holdings (tickers, cost basis, quantity, holding flag)
- Trades and review notes (open/close prices, dates, reasons, deviation notes, lessons)
- Strategy rules you write
- Dividend entries, price alerts, signal history
- Preferences (market, language, display mode, notification settings, trading-cost settings, manual sector overrides)
Technical information
- Our hosts keep ordinary access logs (IP, timestamp, user agent) for reliability. We don't use them to profile users.
What we do not collect
- No brokerage credentials, government IDs, card or payment details
- No brokerage API connection; we never place orders for you
- Trades you log here are a manual journal, independent of the orders you actually place
Why we collect it
Only to provide the features you actively use: computing signals, running backtests, producing review attribution, and sending notifications you subscribed to. Nothing else — no ad targeting, no cross-user behavioural analysis.
Where it lives and who can see it
Data is stored in Supabase (PostgreSQL). Every user-data table has Row Level Security enabled, scoped by user_id — in normal operation only your own session can read your rows.
The maintainer may access the backend when necessary to diagnose faults. We do not browse your trades for analytics, training, or commercial purposes.
Third-party services
| Service | Purpose | Data involved |
|---|---|---|
| Supabase | Database, auth, backend functions | All account and content data above |
| Yahoo Finance | Prices, fundamentals, earnings dates | Ticker symbols only — no personal data is sent |
| HKEXnews | HK earnings and dividend filings | Ticker symbols only |
| Resend | Sending signal notification emails | Your email address and the message content |
| Cloudflare / Lovable | DNS and site hosting | Ordinary access logs |
We do not sell, rent, or trade your data to advertisers, data brokers, or anyone else.
Your rights and how to use them
Export: Settings → Data & Privacy → "Export all my data" downloads a JSON file containing your data.
Deletion: Self-service deletion is not available yet (in development). Email alerts@stock-compass.app to request deletion and we will remove your account and associated data.
Unsubscribe: Every notification email has an unsubscribe link; you can also turn notifications off in Settings → Notifications.
Correction: All of your content (watchlist, trades, strategies, settings) can be edited or deleted directly in the app.
Retention
Data is kept while your account exists and is removed when the account is deleted. Market-data and fundamentals caches (which contain no personal data) roll over on their own schedule.
Cookies and local storage
We use necessary browser storage to keep you signed in and to cache market data for faster loading. No advertising or cross-site tracking cookies.
Children
The tool is not directed at people under 18 and we do not knowingly collect their information.
Changes
Material changes will be reflected in the date at the top of this page, with an in-app notice for significant ones.
Contact
Privacy questions: alerts@stock-compass.app