Privacy Policy
Last updated: July 2026
1. What we collect
Account info: your email address and display name via Google Sign-In (Supabase Auth). We never see or store your Google password.
Content you create: posts, comments, watchlist tickers, saved valuations, investment theses, investing-log entries, and paper-trading activity.
Profile media: a profile photo, if you choose to upload one.
Push notification tokens, if you opt in to alerts (e.g. thesis health changes).
2. How we use it
To operate core features: your account, feed posts, thesis tracking, paper portfolio, and leaderboard rankings.
To personalize your experience: your watchlist, saved valuations, and language preference.
To send you notifications you've opted into (e.g. a push alert when a tracked stock's health score drops).
We do not sell your personal data to third parties.
3. What's public vs. private
Public within the app: your display name, profile photo, feed posts, and paper-trading leaderboard ranking/returns (if you appear on the leaderboard).
Private: your investing-log entries (P&L journal) are private by default and only shared in aggregate/anonymized form if you explicitly opt in per entry.
4. Third-party services
Supabase (database, authentication, file storage), Vercel (hosting), Finnhub and Alpaca (market data), and Perplexity AI (AI-generated analysis). These providers process data on our behalf under their own security and privacy terms.
5. Data retention & deletion
We retain your data for as long as your account is active. To request deletion of your account and associated data, contact us — see the contact details below.
6. Cookies & local storage
TreasureX uses browser local storage to keep your watchlist, valuations, and preferences available offline and to persist your session. We use essential cookies for authentication only — no third-party ad-tracking cookies.
7. Contact
Questions about this policy or your data? Reach out via the app's feedback channel or the contact email listed on our landing page.