Privacy Policy

This Privacy Policy explains how SproutedStocks ("we", "us", "our") collects, uses, and protects your personal data when you use sproutedstocks.com. We are committed to protecting your privacy in accordance with the UK GDPR and the Data Protection Act 2018.

1. What Data We Collect

We collect the following personal data:

• Account data: your email address and password (stored securely via Supabase Auth)
• Payment data: your payment method and billing details are processed by Stripe. We do not store your card details on our servers.
• Usage data: pages visited, calculator inputs, and feature usage (used only to improve the product)
• Preferences: your favourite stocks, stored locally in your browser (localStorage)

2. How We Use Your Data

We use your data to:

• Provide and improve SproutedStocks
• Manage your account and subscription
• Send you transactional emails (e.g. receipts, password resets)
• Respond to support queries

We do not sell your data to third parties. We do not use your data for targeted advertising.

3. Legal Basis for Processing

We process your data on the following legal bases:

• Contract: to fulfil your subscription and provide the service you've signed up for
• Legitimate interests: to improve our platform and prevent fraud
• Legal obligation: where required by law

4. Third-Party Services

We use the following third-party services which may process your data:

• Supabase — authentication and database hosting (Privacy Policy)
• Stripe — payment processing (Privacy Policy)
• Vercel — website hosting (Privacy Policy)
• Yahoo Finance API — stock price data (no personal data is shared)

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g. financial records).

6. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a portable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email us at hello@sproutedstocks.com. We will respond within 30 days.

7. Cookies

We use only strictly necessary cookies for authentication (session tokens). We do not use tracking cookies or third-party advertising cookies.

8. Security

We take reasonable technical and organisational measures to protect your data, including encrypted storage, HTTPS, and access controls. No method of transmission over the internet is 100% secure, but we do our best to protect your information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the website.

10. Contact & Complaints

For any privacy questions, contact us at hello@sproutedstocks.com.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.