Privacy Policy

This policy explains what personal data Stockatomics collects, why we collect it, how we use and protect it, and the rights you have over it. It applies to the website at stockatomics.com and to the Stockatomics Terminal.

1. Who we are

Stockatomics.com ("Stockatomics", "we", "us" and "our") is the controller of your personal data, which means we decide how and why it is used. You can contact us about anything in this policy at hello@stockatomics.com.

2. What we collect

• Account details: your email address and password, which is stored only in encrypted, hashed form. If you sign in with Google, we receive your name, email address and profile picture from your Google account.
• Terminal data: your settings and what you save in the Terminal, such as your dashboard layout and the minerals and companies you follow.
• Subscription details: if you subscribe, your billing details and payment history. Payments are handled by our payment provider, and we never see or store your full card number.
• Messages: what you send us when you get in touch.
• Usage and device data: the pages you view and the features you use, your browser and device type, the page that referred you and your approximate location based on your IP address. We collect this through our server logs and our analytics.

We don't collect sensitive personal data, such as health or political information, and we don't buy personal data from data brokers.

3. How we use it

Purpose	Data	Lawful basis
Create and run your account and give you access to the Terminal	Account details, Terminal data	Contract
Take payments and keep billing and tax records	Subscription details	Contract and legal obligation
Send service emails, such as sign-in codes, security notices and receipts	Account details	Contract
Keep Stockatomics secure and prevent fraud and abuse	Usage and device data	Legitimate interests
Understand how Stockatomics is used and improve it	Usage and device data	Legitimate interests, or consent where analytics cookies require it
Send product news and updates, only if you opt in	Email address	Consent
Reply to your messages	Messages, account details	Legitimate interests
Meet our legal obligations	Any of the above, as required	Legal obligation

4. Who we share it with

We share personal data only with the service providers that help us run Stockatomics, each bound to use it only on our instructions:

• Supabase: database and account sign-in, hosted in the European Union
• Vercel: website hosting and delivery
• Resend: email delivery
• Google: only if you choose to sign in with Google
• Vercel Web Analytics: usage analytics
• Our payment provider: payments, when you subscribe

We may also disclose personal data where the law requires it, to protect our rights or the safety of others, or to an organisation that takes over Stockatomics, for example a company set up to run it, which would continue to protect it under this policy.

We never sell your personal data, and we don't share it for advertising.

5. International transfers

Some of our service providers are based in, or access data from, countries outside the UK and the European Economic Area, including the United States. Where that happens, we rely on safeguards recognised under UK data protection law, such as the UK–US data bridge or the International Data Transfer Addendum to the EU standard contractual clauses.

6. How long we keep it

• Account details and Terminal data: for as long as your account is open. If you delete your account, we delete them within 30 days, unless the law requires us to keep something for longer.
• Billing records: for as long as tax law requires, normally six years.
• Usage and device data: only as long as we need it for security and analysis, after which it is deleted or kept only in aggregated form that no longer identifies you.
• Messages: for as long as we need them to deal with your enquiry.

7. Cookies and similar technologies

• Essential: cookies that keep you signed in and keep Stockatomics secure. These are needed for the service to work, so they don't require your consent.
• Preferences: your choice of light or dark theme, stored in your browser.
• Analytics: we use Vercel Web Analytics to understand how Stockatomics is used. It doesn't set cookies.

You can delete cookies at any time in your browser settings, although deleting the essential ones will sign you out.

8. Your rights

Under UK data protection law, you have the right to:

• get a copy of the personal data we hold about you
• have inaccurate data corrected
• have your data deleted
• restrict or object to how we use your data
• receive your data in a portable format
• withdraw your consent at any time, where we rely on it

To use any of these rights, or to delete your account, email hello@stockatomics.com. We'll respond within one month.

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk. If you live in the European Union, you can contact your local data protection authority.

9. Security

We protect your data with encryption in transit, hashed passwords and access restricted to what's needed to run the service. No system is completely secure, but we take reasonable steps to keep your data safe and will tell you promptly if a breach affects you in a way the law requires us to report.

10. Children

Stockatomics is not intended for anyone under 18, and we don't knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed, and we'll tell you by email before any significant change takes effect.

12. Contact

Questions about this policy or your data: hello@stockatomics.com