Privacy Policy

1. Information We Collect

When you create an account or use StonkHub, we may collect the following information:

• Account information: Your email address, display name, and authentication credentials. Passwords are salted and hashed using bcrypt and are never stored in plaintext.
• OAuth data: If you sign in via Google or GitHub, we receive your public profile name, email address, and a unique identifier. We do not request or store your OAuth access tokens beyond the authentication session.
• Usage data: Your watchlist tickers and subscription status, which are necessary to deliver the service.
• Payment information: Billing is handled entirely by Stripe. StonkHub never receives, processes, or stores your credit card number or banking details. We retain only a Stripe customer ID to manage your subscription.
• Technical data: Server logs may temporarily record IP addresses, browser type, and request timestamps for security and rate-limiting purposes. These logs are not used for tracking or profiling.

2. How We Use Your Information

We use collected data strictly to:

• Authenticate your identity and manage your account
• Deliver, maintain, and improve the StonkHub platform
• Process subscription payments through Stripe
• Enforce rate limits and protect against abuse or unauthorized access
• Communicate essential account-related notifications (e.g., billing issues, security alerts)

We will never use your data to build advertising profiles, sell leads, or target you with third-party marketing.

3. Data Security

We take the protection of your information seriously:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
• Encryption at rest: Sensitive data stored in our database is encrypted. Passwords are one-way hashed with bcrypt and cannot be reversed or read by anyone, including StonkHub staff.
• Minimal data collection: We follow the principle of data minimization — we only store what is necessary to provide the service.
• Access controls: Database access is restricted to essential infrastructure and is protected by authentication and network-level controls.

4. No Sale of Data

5. Third-Party Services

StonkHub integrates with a limited set of third-party services to function:

• Stripe: Processes payments and manages subscriptions. Stripe's handling of your billing data is governed by the Stripe Privacy Policy.
• Google / GitHub OAuth: Used solely for authentication. We receive only your public profile information and email — nothing more.
• Financial data APIs: We fetch publicly available market and political data from third-party providers. These providers do not receive any of your personal information.

6. Cookies & Local Storage

StonkHub uses a single authentication token stored in your browser's local storage (or as a cookie during OAuth flows). We do not use tracking cookies, advertising pixels, analytics scripts, or any third-party tracking technology.

7. Data Retention & Deletion

Your account data is retained for as long as your account is active. If you wish to delete your account and all associated data, contact us and we will permanently remove your information from our systems within 30 days. Stripe may retain billing records independently as required by financial regulations.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing

To exercise any of these rights, contact us at the email listed below.

9. Children's Privacy

StonkHub is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify users via email or a prominent notice on the platform. Your continued use of StonkHub after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions or concerns about this Privacy Policy? Reach us at hello@stonkhub.net.