Privacy Policy

1. Introduction

Stock Market Rotation ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service.

2. Information We Collect

We may collect the following types of information:

• Account information: Email address, name, and authentication data when you create an account.
• Portfolio data: Holdings, positions, and related financial data you voluntarily input into the Portfolio Tracker.
• Usage data: Pages visited, features used, time spent on the Service, and device information collected automatically.
• Cookies: Essential cookies for authentication and preferences such as theme selection.

3. How We Use Your Information

• To provide and maintain the Service
• To generate personalized portfolio analysis and alerts
• To improve and optimize the Service
• To communicate important updates about the Service
• To detect and prevent fraud or abuse

4. Data Protection

We implement industry-standard security measures to protect your data, including encryption in transit and at rest. Your portfolio data is stored securely and is never sold to third parties. We use Supabase for authentication and data storage, which provides enterprise-grade security infrastructure.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share anonymized, aggregated data for analytical purposes. We may disclose information if required by law or to protect our rights and safety.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your portfolio data at any time
• Opt out of non-essential communications

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account deletion, your personal data and portfolio information will be permanently removed within 30 days.

8. Third-Party Services

The Service may use third-party services for authentication (Google OAuth), data storage (Supabase), and market data providers. These services have their own privacy policies, and we encourage you to review them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated revision date.