Privacy Policy

1. Information We Collect

Account Information

When you sign in with Google OAuth, we receive and store your name, email address, and profile picture. We do not access your Google contacts, calendar, drive, or any other Google services.

Usage Data

We collect information about how you use the platform: reports generated, stocks searched, pages visited, and features used. This data is used to improve the product and understand usage patterns.

Generated Reports

Reports you generate are stored in our database and may be made publicly accessible (without your personal identity attached) as part of the community report library.

2. How We Use Your Information

• Provide and maintain the Service
• Authenticate your identity and manage your account
• Enforce subscription limits (free tier report count)
• Improve and develop new features
• Send transactional emails (account confirmations, billing receipts)
• Aggregate anonymized analytics

3. Data Sharing

We do not sell your personal data to third parties. We share data only with:

• Stripe — for payment processing (name, email, payment method)
• Supabase — database hosting (all stored data)
• Vercel — application hosting (server logs, IP addresses)
• Analytics providers — anonymized usage data only

4. Cookies

We use the following cookies:

• Authentication cookies — essential, keep you logged in (session token)
• Preference cookies — functional, remember your settings

We do not use third-party advertising cookies or cross-site tracking cookies.

5. Data Retention

Account data is retained for as long as your account is active. Generated reports are retained indefinitely as part of the community library. If you delete your account, your personal data is removed within 30 days. Anonymized reports (without user association) may remain in the public library.

6. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and personal data
• Export your generated reports

To exercise these rights, contact us at admin@zoodleme.com.

7. Security

We use industry-standard security measures: encrypted connections (HTTPS), secure authentication (OAuth 2.0), encrypted payment processing (Stripe PCI compliance), and access-controlled databases. However, no system is 100% secure.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification.

9. Contact

Questions about privacy? admin@zoodleme.com