Privacy Policy

1. Information we collect

• Account: your email address, a securely hashed password, and sign-in dates.
• Questionnaire and preferences: investing experience, goal, sectors of interest, risk comfort, the stocks you follow, event reminders, language, time zone and notification settings.
• Subscription: your Stripe customer and subscription identifiers, plan, status and dates. Your card details are handled by Stripe; we never see or store them.
• Notifications: if you turn them on, a technical address for your device's browser push service and your browser type.
• Questions you ask Ask FinLens: sent to our AI provider to generate the answer; we do not store them.
• Technical data: IP address, device and browser information and errors in server logs, kept briefly for security and troubleshooting.

2. Why we use it

• To create and secure your account and provide the service you pay for.
• To personalise FinLens: ranking news and signals around your stocks and interests, and adapting explanations to your experience.
• To send the notifications and morning brief you turned on.
• To process payments and manage your subscription.
• To prevent abuse, keep the service secure and meet legal obligations.

We do not sell your personal information, do not use it for advertising, and do not use advertising or analytics trackers. We do not make decisions about you based solely on automated processing that have legal effects; the personalisation above only changes what you see first.

3. Service providers

We share information only with providers that help us run FinLens, under contracts that require them to protect it: Supabase (database, sign-in and emails), Vercel (hosting), Stripe (payments) and OpenAI (answers to your questions). Market data providers receive no personal information.

These providers may store and process data outside Quebec, Canada and Switzerland, mainly in the United States. Before transferring information we assess that it will be adequately protected, as required by law.

4. Cookies

We use only essential cookies: one to keep you signed in and one to remember your language. No advertising or tracking cookies.

5. How long we keep it

We keep your information while your account is open. When you delete your account, your profile, preferences, watchlist, reminders and notification settings are deleted immediately from our database; residual copies in encrypted backups are erased on their normal rotation. Stripe keeps billing records as required by law. Server logs are kept for a short period.

6. Security

Data is encrypted in transit; passwords are hashed; each user can only access their own data; access to production systems is restricted. If a confidentiality incident presents a risk of serious harm, we will notify you and the competent authorities as required by law.

7. Your rights

• Access the personal information we hold about you and receive a copy, including in a structured, commonly used format.
• Correct inaccurate information.
• Delete your account at any time in Settings → Delete my account, or ask us to.
• Withdraw consent, for example by turning off notifications.
• Complain to a supervisory authority: the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, the Swiss Federal Data Protection and Information Commissioner (FDPIC), or your EU data protection authority.

To exercise your rights, write to infofinlensapp@gmail.com. We answer within 30 days.

8. Children

FinLens is intended for adults (18+). We do not knowingly collect information about minors.

9. Person in charge and contact

The person in charge of the protection of personal information is [Name and title of the person in charge of privacy]. Contact: infofinlensapp@gmail.com — [Company legal name], [Company address].

We will notify you of important changes to this policy in the app or by email.