Privacy Policy

This policy explains what Stock Desk collects, why, and what control you have. It applies to stockdesk.co.

1. What we collect

Information you give us

• Email address — used to identify your account and contact you about the service.
• Password — stored only as a one-way cryptographic hash. We cannot read your password, and neither can anyone who obtains the database.
• Google account details — if you sign in with Google, we receive your email address, first name and a Google account identifier. We never receive your Google password.
• Watchlists and saved research — the tickers and analyses you choose to save.
• Questions you type into the AI assistant.

Information collected automatically

• Session cookie — a single essential cookie that keeps you logged in. It contains a random token, not personal data.
• Server logs — standard web-server records including IP address, browser type and pages requested, kept for security and troubleshooting.

We do not collect your financial account details, holdings, or brokerage information. We do not use advertising or tracking cookies.

2. Payment information

If and when paid subscriptions are enabled, payments are handled by a third-party payment processor. Card numbers are entered on their systems, not ours — we never see or store your full card details. We may store a customer reference and your subscription status.

3. Why we use it

• To create and secure your account and keep you signed in.
• To provide the service — saving your watchlist, showing your research, unlocking paid features.
• To answer your questions through the AI assistant.
• To protect against fraud, abuse and unauthorised access.
• To meet legal obligations.

Our legal bases (where the UK/EU GDPR applies) are performance of our contract with you, our legitimate interests in securing and improving the service, and consent where required.

4. Who we share it with

We do not sell, rent or trade your personal information, and we do not share it for advertising.

Data is shared only with service providers that make the site work:

• Our web host — stores the site and database.
• Anthropic — receives the text of questions you ask the AI assistant, in order to generate a reply.
• Google — only if you choose to sign in with Google.
• Market data providers (Yahoo Finance, Finnhub, YouTube) — these receive ticker symbols only. Requests are made from our server, so your IP address and identity are not passed to them.

We may also disclose information where legally required, or to protect our rights or the safety of others.

5. How long we keep it

Account information is kept while your account is active. Login sessions expire after 30 days. If you delete your account, we remove your personal data within 30 days, except where we must retain records for legal or accounting reasons.

6. Security

Traffic is encrypted with HTTPS. Passwords are hashed, never stored in readable form. Session cookies are marked secure and HTTP-only so they cannot be read by scripts. API keys are held on our server and are not exposed to your browser. No system is perfectly secure, but we take reasonable measures to protect your information and will notify you of a breach affecting your data where the law requires.

7. Your rights

Depending on where you live, you may have the right to:

• access a copy of the data we hold about you;
• correct inaccurate information;
• delete your account and data;
• object to or restrict certain processing;
• receive your data in a portable format;
• withdraw consent at any time.

To exercise any of these, email support@stockdesk.co. We respond within 30 days and do not charge for reasonable requests.

8. Children

Stock Desk is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us personal data, contact us and we will delete it.

9. International transfers

Our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for those transfers.

10. Cookies

We use one essential cookie (sd_session) to keep you logged in, and a short-lived cookie during Google sign-in to prevent a security attack. Both are strictly necessary for the service, so no consent banner is required. We use no analytics or advertising cookies.

11. Changes

If we change this policy we will update the date above, and will tell you directly if the change is significant.

12. Contact

Questions or requests: support@stockdesk.co