Privacy Policy

1. Introduction

StockLens is an AI-powered stock research and analysis platform covering Indian (NSE) and global markets. We are operated by a small independent team and are committed to handling your personal data responsibly and transparently.

This Privacy Policy explains what information we collect when you use StockLens, how we use it, and the choices you have. By using StockLens you agree to the practices described below.

2. Information We Collect

We collect the following categories of information:

• Account information. When you register, we collect your email address and/or phone number, which are used to authenticate you via magic-link or SMS OTP.
• Usage data. We record the analyses you run, stocks you view, watchlist items, portfolio holdings, and price alerts you configure. This is necessary to enforce plan limits and provide personalised features.
• Risk profile data. If you complete the optional risk-profile questionnaire, we store your answers (risk tolerance, investment horizon, preferred currency) to personalise AI scoring.
• Payment information. Subscription payments are processed by Razorpay. We do not store card numbers, UPI handles, or other sensitive payment credentials on our servers. We receive a subscription ID and status from Razorpay after a successful transaction.
• Cookies and session data. We use session cookies set by Supabase to keep you logged in. We do not use advertising or tracking cookies.
• Technical data. Standard server logs may include your IP address, browser type, and request timestamps for security and debugging purposes.

3. How We Use Your Information

• To authenticate you and maintain your session.
• To provide AI-powered stock analysis, scoring, and research features.
• To send price-alert email notifications if you have configured alerts and opted in.
• To enforce subscription plan limits and process billing via Razorpay.
• To personalise analysis output based on your risk profile and currency preference.
• To detect and prevent abuse, fraud, and unauthorised access.
• To improve the platform — usage patterns help us understand which features are most valuable.

We do not use your data for advertising and we do not sell your data to any third party.

4. Data Storage & Security

Your data is stored in a PostgreSQL database managed by Supabase, hosted on secure cloud infrastructure. All data is encrypted at rest and all traffic between your browser and our servers is encrypted in transit via TLS.

Row-level security (RLS) policies ensure that each user can only access their own data. Administrative operations that bypass RLS (such as writing to shared caches) are performed only via a service-role key that is never exposed to the browser.

No personal data is sold, rented, or shared with third parties for commercial purposes.

5. Third-Party Services

StockLens integrates with the following third-party services, each of which may receive limited data necessary to perform its function:

• Razorpay — payment processing. Receives billing details you enter during checkout. Governed by the Razorpay Privacy Policy.
• Financial data providers — market data (prices, fundamentals, earnings) is sourced from licensed financial data APIs. No personal data is shared with these providers.
• Resend — email delivery for price-alert notifications. Your email address is transmitted to Resend solely to deliver alert emails you have requested.
• Anthropic — AI analysis is generated by Claude models via the Anthropic API. Ticker symbols and publicly available financial data are sent; no personally identifiable information is included in AI prompts.
• Tavily — web search used by the AI chat feature to retrieve recent news. No personal data is included in search queries.

6. Data Retention

We retain your account and usage data for as long as your account is active. Cached analysis data (which contains no personal information) is automatically expired after 24 hours.

If you request deletion of your account, we will delete or anonymise your personal data within 30 days of receiving your request, except where retention is required by law or legitimate business necessity (for example, billing records).

7. Your Rights

• Access. You can request a copy of the personal data we hold about you.
• Correction. You can update your account information at any time in your account settings.
• Deletion. You can request that we delete your account and associated data.
• Opt-out of marketing emails. Price-alert emails can be turned off by deleting your alerts. We do not send marketing or promotional emails.

To exercise any of these rights, please contact us at the address in Section 10.

8. Children's Policy

StockLens is not intended for use by persons under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email. Continued use of StockLens after the updated policy takes effect constitutes acceptance of the changes.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please email us at: support@stocklens.in