PRIVACY POLICY

LAST UPDATED: MARCH 2026

1. INFORMATION WE COLLECT

We collect the following types of information:

> Account information: Email address, display name, and authentication credentials when you create an account.
> Usage data: Pages visited, features used, timestamps, device information, and browser type.
> Portfolio data: Ticker symbols, share quantities, and average prices you enter into the portfolio tracker.
> Alert preferences: Tickers, conditions, and notification settings you configure.
> Payment information: Processed securely by Stripe. We do not store your full card details.

2. HOW WE USE YOUR INFORMATION

We use collected information to:

> Provide, maintain, and improve the Service
> Process your subscription and manage billing
> Send you alerts, notifications, and service-related communications
> Analyze usage patterns to improve features and user experience
> Comply with legal obligations and enforce our Terms of Service

3. DATA STORAGE AND SECURITY

Your data is stored on secure servers provided by Supabase (hosted on AWS). We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls. While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

4. COOKIES AND TRACKING

We use essential cookies for authentication and session management. We may use analytics cookies to understand how users interact with the Service. You can control cookie preferences through your browser settings. Disabling essential cookies may prevent certain features from functioning properly.

5. THIRD-PARTY SERVICES

We integrate with the following third-party services:

> Supabase: Database and authentication infrastructure
> Stripe: Payment processing (when available)
> OpenAI: AI analysis pipeline — article text may be sent for processing
> Yahoo Finance: Real-time market data
> Vercel: Hosting and deployment infrastructure

Each third-party service has its own privacy policy. We encourage you to review their policies.

6. YOUR RIGHTS

Under applicable data protection laws (including GDPR), you have the right to:

> Access the personal data we hold about you
> Request correction of inaccurate data
> Request deletion of your data ("right to be forgotten")
> Object to or restrict processing of your data
> Request data portability
> Withdraw consent at any time

To exercise any of these rights, contact us at privacy@shadowbrokers.io.

7. DATA RETENTION

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention). Anonymized usage data may be retained indefinitely for analytics purposes.

8. CHILDREN'S PRIVACY

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete that information promptly.

9. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the Service. The "Last Updated" date at the top of this page indicates when the policy was last revised.

10. CONTACT

If you have questions about this Privacy Policy or our data practices, contact us at privacy@shadowbrokers.io.