Privacy Policy

This Privacy Policy explains how StockMarketSignals ("we", "us", or "the Service"), available at stockmarketsignals.org, accesses, uses, stores, shares, retains, and deletes user information. It includes a specific disclosure of how the Service interacts with Google user data, in compliance with the Google API Services User Data Policy, including its Limited Use requirements.

1. Data We Access

StockMarketSignals offers an optional "Sign in with Google" feature for account authentication. When you choose to sign in with Google, we request the following Google account scopes:

• openid — a unique identifier used to recognize your account.
• .../auth/userinfo.email — your primary email address.
• .../auth/userinfo.profile — your basic profile information (name and profile picture).

We do not request access to Gmail, Google Drive, Contacts, Calendar, YouTube account data, or any other restricted or sensitive Google data. We only access the basic profile information listed above.

We also collect limited information you provide directly (such as messages submitted through our contact form) and standard technical data (such as IP address and browser type) for security and to operate the Service.

2. How We Use Data

We use Google user data solely to:

• Authenticate you and create or sign you into your account.
• Identify your account so we can save and display your personal preferences (such as the creators you follow and your personalized picks).
• Communicate with you about your account and the Service where necessary.

We do not use Google user data for advertising, and we do not use it to train, develop, or improve any generalized or artificial intelligence / machine learning models.

3. How We Share Data

We do not sell, rent, or trade your Google user data. We do not transfer Google user data to third parties except as necessary to provide the Service, comply with applicable law, or protect against fraud, abuse, or security issues.

We use the following service providers ("subprocessors") strictly to operate the Service:

• Lovable Cloud / Supabase — secure database, authentication, and hosting infrastructure that stores your account record.
• Email delivery provider — used only to send transactional emails you have requested or that relate to your account.

These providers process data only on our behalf and under contractual confidentiality and security obligations.

4. Data Storage & Protection

Your data is stored on secure, access-controlled cloud infrastructure. We protect data in transit using HTTPS/TLS encryption and rely on industry-standard encryption at rest provided by our hosting platform. Access to user data is restricted to authorized personnel and is governed by row-level security policies that limit each account to its own data. We do not store your Google password; authentication is handled directly by Google through the OAuth protocol.

5. Data Retention & Deletion

We retain your account information for as long as your account remains active. If you wish to delete your account and all associated personal data, including data obtained through Google Sign-In, you can request deletion at any time by emailing support@stockmarketsignals.org or by using our contact form. Upon a verified request, we will permanently delete your account and associated personal data within 30 days, except where retention is required by law. You may also revoke our access to your Google account at any time via your Google Account permissions page.

6. Limited Use Disclosure

StockMarketSignals' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Contact

For any questions about this Privacy Policy or your data, contact us at support@stockmarketsignals.org.