Privacy Policy

Louis De Gong LLC ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use PickStocks.io (the "Service").

By using our Service, you consent to the data practices described in this policy. If you do not agree with our policies, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

When you register for an account or use our Service, we may collect:

• Account Information: Email address, name, password (encrypted)
• Profile Information: Profile picture, display preferences
• Payment Information: Billing address, payment method details (processed securely by Stripe)
• User Content: Watchlists, alerts, and preferences you create
• Communications: Messages you send to our support team

1.2 Information Collected Automatically

When you access the Service, we automatically collect:

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, stocks analyzed, time spent
• Log Data: IP address, access times, referring URLs
• Cookies: Session cookies for authentication and preferences

1.3 Information from Third Parties

If you sign in using Google OAuth, we receive your name, email, and profile picture from Google. We do not receive your Google password.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and manage your subscription
• Send you service-related communications (account updates, security alerts)
• Send marketing communications (with your consent, which you can withdraw)
• Personalize your experience and provide relevant stock analysis
• Monitor and analyze usage patterns to improve functionality
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

3. How We Share Your Information

We do NOT sell your personal information. We may share your information with:

3.1 Service Providers

• Stripe: Payment processing (PCI-DSS compliant)
• Supabase: Authentication and database services
• Vercel: Website hosting and delivery
• Analytics Providers: Usage analytics (anonymized data)

3.2 Legal Requirements

We may disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of Louis De Gong LLC, our users, or others.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences and settings
• Understand how you use our Service
• Improve and personalize your experience

Types of Cookies We Use

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features of the Service.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing (never stored in plain text)
• Regular security assessments and updates
• Access controls and employee training
• PCI-DSS compliant payment processing through Stripe

While we take reasonable measures to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. We may also retain information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Maintain business records for tax purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Portability

You can access your personal data through your account settings. You may request a copy of your data in a portable format.

7.2 Correction

You can update your account information at any time through your profile settings.

7.3 Deletion

You can request deletion of your account and personal data by contacting us at privacy@pickstocks.io. We will process your request within 30 days.

7.4 Marketing Opt-Out

You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any marketing email or updating your preferences in your account settings.

7.5 Do Not Track

We currently do not respond to "Do Not Track" browser signals.

8. Information for European Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Object: Object to processing of your personal data
• Right to Restrict: Request restriction of processing
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Lodge Complaint: File a complaint with your local data protection authority

Our legal bases for processing include: contract performance, legitimate interests, compliance with legal obligations, and your consent where applicable.

9. Information for California Users (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights:

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do NOT sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise your CCPA rights, contact us at privacy@pickstocks.io. We will verify your identity before processing your request.

10. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a child, we will delete it immediately.

If you believe a child has provided us with personal information, please contact us at privacy@pickstocks.io.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws.

We ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes

Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, our Data Protection contact can be reached at privacy@pickstocks.io.