Privacy Policy

1. Information We Collect

We collect the following information when you use Buy High Sell Low:

• Email address (when you create an account or sign in via Google)
• Usage logs (pages visited, features used, stocks viewed, AI summaries requested)
• Watchlist data (tickers you choose to save)
• Paper trading data (simulated portfolio, transactions, achievements)
• Cookies and similar tracking technologies (see Section 5)
• Device and browser information collected automatically by third-party services (Google AdSense, Supabase)

We do not collect financial account information, payment details, or government IDs.

2. How We Use Your Information

• To provide, maintain, and improve the service
• To authenticate your account and secure your session
• To send transactional emails (account confirmation, password reset)
• To enforce usage limits (AI summary: 30 requests/user/day)
• To serve relevant advertisements via Google AdSense
• To detect and prevent abuse, spam, or unauthorized access

We do not use your information to make automated trading decisions or provide investment recommendations.

3. Data Retention

• Account data: retained while your account is active
• Watchlist data: deleted when you remove items or delete your account
• Stock price history: 90 days rolling retention (intraday), long-term daily history retained indefinitely
• Paper trading data: retained while your account is active
• News articles: 90 days rolling retention (older articles are automatically deleted)
• AI usage logs: 12 months
• Fetch/error logs: 90 days

To request deletion of your account and associated data, contact us at adind96@gmail.com. We will process deletion requests within 30 days.

4. Third-Party Services

We use the following third-party services which may collect data independently:

• Supabase: Authentication and database provider. Stores your email, watchlist, and usage data. Hosted in the EU (Ireland). Supabase Privacy Policy
• Google AdSense: Serves advertisements and may use cookies to show personalized ads based on your browsing behaviour. Google Advertising Policies
• Groq: Generates AI summaries of news articles using the Llama 3.3 model. Article titles and content snippets are sent to Groq's API. Groq Privacy Policy
• Twelve Data: Financial data provider for S&P 500 stocks, ETFs, and cryptocurrency prices. No personal data is shared with this service.
• NewsAPI: News aggregation provider. No personal data is shared with this service.

5. Cookies

6. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with the third-party service providers listed in Section 4, strictly to operate the service. We may disclose data if required by law, court order, or to protect our legal rights.

7. Affiliate Disclosure

Buy High Sell Low participates in affiliate programmes. Some links on this site (clearly labelled "Sponsored") are affiliate links. If you click and open an account, we may receive a commission at no additional cost to you. We only include affiliate links for services we believe may be of genuine interest. Affiliate relationships do not influence editorial content or AI analysis results.

8. Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of the data we hold about you
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restriction: Limit how we process your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests

To exercise any of these rights, email adind96@gmail.com with your request. We will respond within 30 days.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect and how it is used
• The right to delete personal information we have collected
• The right to opt out of the sale of personal information (we do not sell data)
• The right to non-discrimination for exercising your privacy rights

To submit a CCPA request, contact adind96@gmail.com.

10. Security

We implement reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), row-level security on our database, and bcrypt-based authentication via Supabase. However, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

11. Children's Privacy

Buy High Sell Low is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with their data, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date above. Continued use of the service after changes constitutes acceptance of the revised policy.

13. Contact

For any privacy-related questions, data requests, or complaints, please contact:

Buy High Sell Low
Email: adind96@gmail.com