Privacy Policy

1.1 Personal Information

When you register for an account, we collect:

• Username: Your chosen display name
• Email Address: For account verification, notifications, and communications
• Password: Encrypted and securely stored for account authentication

1.2 Usage Data

We automatically collect information about how you interact with our Service:

• Watchlist stocks and alert preferences
• Price alert triggers and notifications sent
• Login timestamps and session information
• Device information (browser type, operating system, IP address)
• Pages visited and features used

1.3 Device and Push Notification Tokens

If you enable push notifications:

• We store Firebase Cloud Messaging (FCM) device tokens
• Tokens are used solely to deliver price alerts to your device
• You can revoke notification permissions at any time through your device settings

We use your information to:

• Provide the Service: Create and manage your account, deliver price alerts and notifications
• Improve User Experience: Analyze usage patterns to enhance features and performance
• Communication: Send account-related emails (verification, password resets, important updates)
• Security: Detect and prevent fraud, unauthorized access, and security threats
• Legal Compliance: Comply with applicable laws and regulations
• Service Announcements: Notify you about changes to our Service or policies

We may share your information only in the following circumstances:

3.1 Service Providers

• Email Service: To send notification emails (e.g., Nodemailer, SendGrid)
• Cloud Hosting: To host and operate the Service (e.g., Vercel, Render, MongoDB Atlas)
• Market Data Providers: To fetch real-time stock prices (e.g., Upstox API)
• Push Notifications: Firebase Cloud Messaging for mobile/web notifications

These providers are contractually obligated to protect your data and use it only for providing their services to us.

3.2 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service or protect our legal rights
• Prevent fraud, security threats, or illegal activity
• Protect the safety and rights of our users or the public

We implement industry-standard security measures to protect your information:

• Encryption: Passwords are hashed using bcrypt; data transmitted over HTTPS/TLS
• Secure Storage: Database hosted on secure cloud infrastructure with access controls
• Authentication: JWT tokens for secure session management
• Regular Updates: Security patches and dependency updates applied regularly

We use cookies and similar technologies to:

• Authentication Cookies: Keep you logged in across sessions
• Preference Cookies: Remember your settings (theme, language)
• Analytics: Understand how users interact with the Service (if implemented)

You can control cookies through your browser settings. Disabling cookies may affect Service functionality.

6. Data Retention

We retain your personal information for as long as:

• Your account is active
• Needed to provide you the Service
• Required by law or for legitimate business purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, unless retention is required by law.

7. Your Privacy Rights

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and personal data
• Opt-Out: Unsubscribe from email notifications (except essential account emails)
• Data Portability: Request your data in a structured, machine-readable format

To exercise these rights, contact us through the settings page or email us at the contact information provided.

8. Third-Party Links and Services

Our Service may contain links to external websites or services. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any third-party services you visit.

9. Children's Privacy

StockNotify is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

10. International Users

StockNotify is operated from India. If you access the Service from outside India, your information may be transferred to, stored, and processed in India or other countries where our service providers operate.

By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: