Legal
Privacy policy
What we collect, why, who else receives it and what you can do about it.
Last updated Nov 9, 2026
What we collect
- Account information. Your name, email address and profile picture, from Google when you sign in. Sign-in is handled by Firebase Authentication.
- What you put in. The stocks you hold and watch, sizes and costs you enter, alerts, agents, followed investors, tracked strategies, practice trades, saved state in the briefing, questions you ask and feedback you send.
- Plan and billing status. Identifiers and status from our payment provider. Not your card.
- Usage. Page views, navigation and feature use, tied to your account once you sign in.
- Developer access. Token names, scopes, client names, call counts and last-used times. Token secrets are stored only as one-way hashes.
The full list, with where each item lives, is on Security.
Why we collect it
To run the service: to identify you, to build your briefing from your stocks, to send the emails you have on, to bill Pro, and to find what is working and what is broken. We do not sell or rent personal data and we do not run advertising.
Cookies
We set a small number of cookies to keep you signed in and remember your market. See the cookie policy.
Third parties
- Google Firebase Authentication, for sign-in.
- Dodo Payments, for billing.
- Brevo, for sending email.
- OpenAI, to write model-generated text, including answers in Ask. A question about your portfolio sends your holdings with it.
- A web search service, for finding sources.
- PostHog and Google Analytics, for analytics.
- Vercel, for hosting.
- Market data and news vendors, which supply data to us and do not receive yours.
Account data is stored in a database on a server we run. An earlier copy remains in Google Cloud Firestore while we finish moving off it.
Your controls
- Change your portfolio, alerts, agents and email settings in the app at any time.
- Revoke developer tokens in Account.
- Download your data from Account.
- Delete your account from Account. What that removes, and what it does not yet remove, is listed on Security.
- For anything else, including a full erasure or a copy of data the download does not cover, email [email protected].
Children
stocksbrew is not directed at anyone under 18 and we do not knowingly collect data from them. If you believe a minor has signed up, contact us and we will remove the account.
Changes
If we make a material change to this policy we will say so in the app and update the date above.
For how this works in practice, see Security.