Privacy Policy

What we collect

• Account: your name, email, and password (stored hashed by our auth provider), or your Google account details if you sign in with Google.
• Your activity: investor-profile quiz answers, watchlist, holdings you add, and alert preferences.
• Consent records: the disclaimer you accept before subscribing, with a version and timestamp.
• Billing: subscription status and plan. Card details are handled by Stripe — we never see or store your full card number.
• Technical: IP address, device/browser, and basic logs needed to run and secure the service; a web-push token if you turn on browser notifications.

How we use it

To create and run your account, tailor which sectors we surface to your investor profile, process your subscription, send the alerts you opt into, keep the service secure, and meet legal obligations. We do not sell your personal data or use it for third-party advertising.

Legal bases (UK GDPR)

We process your data to perform our contract with you (running the app and your subscription), with your consent (optional alerts), for our legitimate interests (security, improving the product), and to comply with the law.

Who we share it with

We use trusted processors who act on our instructions:

• Supabase — database + authentication hosting.
• Vercel — application hosting.
• Stripe — subscription payments.
• Resend — sending your email alerts.
• Twelve Data and Anthropic — market data and the AI that writes the educational descriptions. We send them company tickers, not your personal data.

Cookies

We use only essential cookies to keep you signed in and secure. We do not use advertising or third-party tracking cookies.

Retention

We keep your data while your account is active and for a reasonable period afterwards to meet legal and accounting needs. You can ask us to delete your account and data at any time.

Your rights

You can access, correct, delete, or export your data, object to or restrict processing, and withdraw consent for alerts at any time — email support@vesoro.net. If you’re in the UK you can also complain to the Information Commissioner’s Office (ICO).

Security & international transfers

Data is encrypted in transit, access is restricted, and each user’s rows are isolated at the database level. Some processors operate outside the UK; where they do, appropriate safeguards apply.

Children

Vesoro is not intended for anyone under 18, and we do not knowingly collect their data.

Changes

We may update this policy; we’ll change the date above and, for significant changes, tell you in the app.