Privacy Policy

SpyStocks is a financial intelligence platform that aggregates publicly available market data to help users make more informed decisions. We are committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data.

Account Data

When you create an account, we collect:

• Full name
• Email address
• Mobile phone number (optional, for alerts)

Payment Data

All payment processing is handled securely by Stripe. SpyStocks does not store your credit card numbers, bank account details, or other sensitive payment information on our servers. Stripe may collect and process your payment data in accordance with their own privacy policy.

Usage Data

We automatically collect information about how you interact with the platform, including:

• Pages visited and features used
• Search queries and filters applied
• Session duration and frequency of visits
• Referral sources

Device Data

We collect technical information about your device and connection, including:

• Browser type and version
• Screen size and resolution
• IP address
• Operating system

Reports You Send

If you report a mistake on a profile page, we keep what you wrote, any screenshots you attach, the part of the page you chose, the page's address, and the account that sent it, so we can review and correct the profile. Reports are not shown to other users.

We use the information we collect for the following purposes:

• Providing and maintaining the SpyStocks service
• Processing subscription payments and managing billing
• Sending trading alerts and notifications you have opted into
• Improving the platform's features, performance, and user experience
• Communicating important updates, security notices, and service changes
• Analyzing usage patterns to identify trends and optimize the platform
• Preventing fraud, abuse, and unauthorized access

SpyStocks integrates with the following third-party services to operate and improve the platform:

Stripe

Used for secure payment processing. Stripe handles all credit card and billing data. We do not have access to your full card details.

Analytics

Used to measure usage such as page views, session duration, and user flow; these events may be associated with account or device identifiers depending on the tool and configuration. This helps us understand how the platform is used and where to improve.

Session Replay

Fullstory on the website and Microsoft Clarity in the mobile app can capture interface interactions to investigate usability issues, subject to the relevant configuration and choices. Mobile Clarity recording is optional, off until enabled, and can be disabled in the app’s privacy settings. Sensitive fields are masked where configured; search text may remain visible.

Firebase and Sign-In Providers

Firebase and supported sign-in providers authenticate users and support application services. The information processed depends on the sign-in method and feature used.

Connected Channels and Infrastructure

Hosting, infrastructure and notification providers process information needed to deliver the Service. Connecting a supported external channel, such as Telegram, involves that channel and its policies. Not every provider or optional feature is active on every surface.

SpyStocks uses cookies and similar tracking technologies to enhance your experience. Specifically:

• Analytics cookies are used to collect anonymous usage data
• Session replay cookies are used to enable session recording for UX improvement
• Essential cookies are used to maintain your session and authentication state

Manage available tracking choices through the relevant privacy controls and browser settings. Mobile Clarity recording requires a separate optional choice in the app and can be turned off in privacy settings. Essential storage is used for authentication and requested features. Contact us for questions about tracking on a particular surface.

We retain your account data for as long as your account remains active. If you close your account or request data deletion, we will remove your personal information from our systems within a reasonable timeframe, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms of Service). Anonymous, aggregated usage data may be retained indefinitely for analytical purposes.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct any inaccurate or incomplete information
• Deletion: Request that we delete your personal data from our systems
• Data Portability: Request a machine-readable copy of your data to transfer to another service
• Opt-Out of Tracking: Withdraw consent for non-essential cookies and analytics tracking

To exercise any of these rights, please contact us at admin@spy-stocks.com. We will review your request within the time required by applicable law and explain any relevant verification or limitations.

We take the security of your data seriously and implement industry-standard measures to protect it, including:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Authentication is managed through Firebase and the supported sign-in providers; do not send passwords or verification codes to support
• Authentication is managed through secure JWT tokens with appropriate expiration policies
• Access to production systems is restricted and monitored

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any potential breaches.

SpyStocks is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a user is under 18, we will take steps to promptly delete their account and associated data. If you believe a minor has provided us with personal information, please contact us immediately.

SpyStocks and its service providers may process and store data in multiple countries, including the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required, international transfers are subject to the safeguards and arrangements applicable under relevant law.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via email or through a prominent notice on the platform. The "Last Updated" date at the top of this policy indicates when the latest revisions were made. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at admin@spy-stocks.com.

Authentication is provided through Firebase and supported sign-in providers. Depending on the chosen sign-in method, we receive an account identifier, email address, verification status and profile fields that the provider shares. We use session credentials to authenticate requests and apply account permissions. Do not send your password or verification codes to support. Signing out, deleting an account and canceling a subscription are different actions.

We process the symbols you follow, watchlist changes, notification preferences, language and appearance choices, and account membership status to provide the features you select. Some preferences are stored on your device, while signed-in features can be stored with your account for synchronization. These are usage preferences, not a complete record of your brokerage holdings or financial situation.

When you enable push notifications, we may associate a device installation identifier or push token with your account and notification settings to route and manage delivery. A connected Telegram or other supported channel can require a channel identifier and connection status. Notification previews may be visible on a locked device according to your operating-system settings. You can change optional delivery preferences and device permissions separately.

The mobile app offers optional screen and usage recording through Microsoft Clarity. The recording choice is separate from accepting the Terms and Privacy Policy and is off until you enable it. Personal and sensitive interface fields are masked where configured; search text can remain visible. You can turn recording off in the app’s privacy settings. Turning it off stops further collection; requests concerning recordings already collected can be sent to support.

The app and website can store preferences, cached content, consent choices and authentication state in device or browser storage. Some secure operating-system storage may survive an app reinstall. Use sign-out and device security controls on shared devices, and do not assume that closing a window or uninstalling the app clears all account state. Clearing local data can remove preferences without deleting server-side account information.

Support and feedback can include the message, chosen page context, screenshots or images you attach, and account details needed to investigate. Review attachments before sending and remove information you do not intend to share. Access is limited to the people and service providers involved in handling the request. Attachments are not intended as a place to store financial, identity or medical documents.

To request access, correction, deletion or another applicable privacy right, contact support with the account email and a description of the request. We may need proportionate verification to avoid disclosing or deleting someone else’s data. Do not send identity documents unless a secure, specific verification process is requested. Applicable exceptions, legal obligations and the rights of others can limit a request; we will explain relevant limitations when responding.

The Service can display public disclosures, biographies, business roles and relationships about people and organizations, independently of whether they have an account. Public records can contain errors, ambiguous identities or outdated information. If you believe a profile or source attribution is inaccurate, contact us with the page and supporting evidence so we can investigate. A correction request does not guarantee removal of lawfully available public-interest information.