Privacy Policy

Last updated 20 June 2026

1. What we collect

Account data (email, optional display name); the preferences you choose to enter (personalization, watchlist, context notes); content you generate (reports, screens, trade plans, chat); and technical usage data needed to run and secure the service.

We also collect product analytics: which pages you open, which features you use, and technical details such as browser, device type, approximate location from your IP address, and page performance. This is tied to your account identifier so we can see whether the product works, and it is never used to build a profile for advertising.

2. Payments

Payments are processed by Lemon Squeezy. We do not receive or store your full card details; we receive only the subscription status needed to grant your plan.

3. How we use your data

To provide and secure the service, personalise the framing of analysis to your stated profile, operate billing, and communicate service and (if you opt in) product messages. We do not sell your personal data.

4. Sub-processors

We rely on Supabase (authentication and database), Vercel (hosting, plus its own traffic and page-performance measurement), Google (Gemini AI processing of your prompts and the public data provided to it), Lemon Squeezy (payments) and PostHog (product analytics). Each processes data only to provide their service to us.

Analytics requests are routed through our own domain so they are not blocked by browser extensions. That routing changes who the request is addressed to, not who receives the data: it still reaches PostHog, and this section is where we say so.

5. Legal basis, retention & transfers

Where applicable (e.g. GDPR), we process data to perform our contract with you and on the basis of your consent. We keep data for as long as your account is active and as required by law, then delete or anonymise it. Data may be processed in countries outside your own under appropriate safeguards.

6. Your rights

You can access and update your data in settings, and delete your account (which removes your personal data) at any time. You may also contact us to exercise applicable rights, including access, correction, deletion and objection.

7. Security, cookies & contact

We use industry-standard measures including encryption in transit, row-level security and rate limiting; no system is perfectly secure. We use essential cookies for authentication and for your language and theme preference, and analytics cookies to measure how the product is used. We do not use advertising cookies and we do not share analytics data with advertisers. Privacy questions: legal@hawkeye.app.