Privacy Policy

1. Who we are

ThetaTickr operates this website and is responsible for the personal data described in this policy.

2. Data we collect

• Account data from Clerk: email, user ID, sign-in provider, any profile details supplied by that provider, and authentication events.
• Billing data from Clerk Billing: subscription Plan, status, period dates, and feature access. Stripe processes payments; card details are never held by ThetaTickr.
• Portfolio and research data you enter or import: portfolios, holdings, shortlist, cash budget, trade tracker entries, income planner settings, followed tickers, and settings.
• Brokerage data if you opt to connect a broker through SnapTrade: institution, account names and types, balances, cash, buying power, positions, and option holdings, all read-only. You sign in to your broker through SnapTrade, so we never receive your broker password. We fetch this data when you use broker features and store it only if you import it into your portfolio or trade tracker. We also store the SnapTrade user ID and secret that link your account.
• Technical data: IP address, browser and device details, pages requested, and request times, used in hosting logs and rate limiting.
• Operational telemetry: error reports and performance traces through Sentry, and page-view analytics through Vercel Analytics. Sentry reports exclude card data and broker secrets, may include your user ID, and do not use session replay.
• Deletion requests: any reason you give when requesting account deletion.

3. How we use it

• To provide the product: we use account, billing, portfolio, and broker data to run the service you signed up for and to manage your subscription, as needed to perform our contract with you.
• To keep it working and secure: we use technical data and telemetry to detect incidents, fix errors, prevent abuse, and understand overall usage, based on our legitimate interest in running a reliable service.
• With your consent: connecting a broker is optional. You can withdraw by disconnecting it at any time.
• To meet legal duties: we keep records where tax, accounting, or other laws require it.

We do not sell your data or share it for cross-site advertising.

4. Who receives it

We share data only with the service providers that make the product work. Each processes data under its own terms and privacy policy.

• Clerk: sign-in, sessions, and subscription management.
• Stripe: payment processing.
• SnapTrade: broker connections, if you opt in.
• Vercel: hosting, logs, file storage, and analytics.
• Neon: our managed Postgres database.
• Upstash: rate limiting and caching.
• Sentry: error and performance monitoring.

To load market data, filings, and news, our servers contact Alpaca, Massive, Alpha Vantage, SEC EDGAR, Yahoo Finance, and Google News. Those requests can include ticker symbols you view or hold, but not your name, email, or account ID.

We may also disclose data if the law requires it, or as part of a business transfer such as a merger or sale.

5. International transfers

Our database is hosted in the United States, and our providers may process data in other countries. Data protection laws there may differ from those where you live. Where the law requires it, we rely on recognized safeguards for these transfers, such as standard contractual clauses.

6. Retention

We retain account and portfolio data while your account is active. When you request deletion, we remove your data from our database and your Clerk account within 30 days. Copies may remain in provider backups, logs, and error reports for a limited period. Billing records may be retained longer where required by tax or accounting law. Rate-limit records expire automatically, typically within an hour.

7. Your controls and rights

• Export: download a JSON copy of your account record, saved portfolios, billing summary, feature access, and broker link status from your profile settings. Data held only in your browser is not included.
• Delete: request account deletion from the same page. If you have a broker connected, disconnect it first so the SnapTrade connection is removed straight away.
• Disconnect a broker: managed in the live portfolio panel. We delete the stored SnapTrade credentials on disconnect and ask SnapTrade to remove the linked user.

Depending on where you live, you may also have the right to access, correct, or receive a copy of your data, to have it deleted, to object to or restrict certain processing, and to withdraw consent. The controls above and your account settings cover most of these requests. We will not treat you differently for using these rights. If you are in the EEA or UK, you can also complain to your local data protection authority.

8. Cookies and browser storage

Clerk sets cookies to keep you signed in, and Stripe may set cookies for fraud prevention during checkout. ThetaTickr also uses browser storage for preferences such as theme, and as the working copy of your portfolios, shortlist, cash budget, and trade tracker entries. Browser storage stays on your device, including after sign-out or account deletion, until you clear your browser's site data. None of this is used for cross-site advertising.

9. Security

Production traffic is HTTPS-only. Account data requires sign-in, and sensitive routes use Origin checks and distributed rate limits. Application queries scope your data to your account. SnapTrade credentials are stored only in our managed Postgres database and are never included in your export. Current subscription state is read from Clerk and is not duplicated in the app database. No service is completely secure, so we cannot guarantee absolute security.

10. Children

ThetaTickr is for people aged 18 or over, as set out in our Terms of Service. We do not knowingly collect data from children, and we will delete any such data we learn of.

11. Changes

We'll post changes here with an updated "last updated" date. We'll announce material changes on the site or, where appropriate, by email.