Privacy Policy

What we collect

• Account data: your email address and a hashed password.
• Watchlist: the ticker symbols you choose to track.
• Delivery preferences: the email address you want briefings sent to (if different) and your timezone.
• Operational logs: request timestamps, IP addresses, and error traces, retained for up to 30 days for debugging and abuse prevention.

What we don't collect

We don't collect brokerage credentials, balances, positions, or any personally-identifying financial data. StockMail never asks you to link a broker.

How we use it

Your data is used to operate the service: authenticating sessions, building your daily email, billing your subscription, and responding to support requests. We don't sell or rent personal data.

Third parties

• Email delivery: outbound briefings go through SMTP configured by the StockMail operator.
• Market data: publicly-available quotes are pulled from third-party data providers; only the ticker symbol is sent.
• AI summarisation: ticker symbols and public market data may be sent to an LLM provider to generate the two-line notes. Your account email is never sent.

Cookies

We set one essential cookie (sm_session) to keep you signed in. We don't use tracking pixels or third-party analytics cookies.

Your rights

You can export or delete your account data at any time from your profile. Email hello@stockmail if you need help or want to exercise rights under GDPR / CCPA / similar law.

Retention

Account data is kept while your account is active. After deletion, we purge personal data within 30 days; backups roll off within 90 days.

Changes

Material changes to this policy will be announced by email at least 14 days before they take effect.