1. Who we are

DoYourDD is a financial data and analytics service operated at doyourdd.ai. We provide social-signal stock momentum analysis to retail investors. If you have questions about this policy, contact us at [email protected].

2. What data we collect

We collect the minimum data needed to operate the service:

• Email address — collected when you register for a free or paid account. Used to issue your access token and, if you consent, to send product updates.
• Payment information — processed entirely by Stripe. We never see or store your card details. Stripe may retain billing data per their own privacy policy.
• Usage data — we log which tickers you run Due Diligence reports on in order to enforce your monthly quota and improve the service. This data is stored in our private database, accessible only to us.
• Watchlist and trading log entries — if you use these features, entries are stored in your browser's local storage and, for logged-in accounts, synced to our private database. We do not use this data for any purpose other than displaying it back to you.
• Google account email — if you choose "Sign in with Google", Google shares your email address with us to create or match your account. We receive no other profile information.

We do not collect browsing history, device fingerprints, or any information beyond what is listed above.

3. How we use your data

• To provide, maintain, and improve the service
• To issue and validate your access token
• To enforce usage quotas (free vs. paid tier)
• To process payments via Stripe
• To send transactional emails (account confirmation, payment receipts) — these cannot be opted out of as they are necessary to deliver the service
• To send product update emails, only if you explicitly opt in

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

4. Cookies and local storage

DoYourDD sets no advertising or analytics cookies of its own. We use your browser's local storage to persist your login session, watchlist, saved reports, and your acknowledgement of our cookie notice. This data never leaves your device unless you are logged in, in which case account data may be synced to our private data store as described above.

Some embedded third-party services set their own cookies when their features load or are used:

• TradingView — the interactive price chart on Due Diligence pages is an embedded TradingView widget, which may set cookies governed by TradingView's privacy policy.
• Google Sign-In — the optional "Sign in with Google" button on the login page loads Google's sign-in library, which may set cookies governed by Google's privacy policy.
• Stripe — Stripe's hosted checkout sets its own cookies when you initiate a payment, including for fraud prevention.
• Cloudflare — our DNS and security provider may set strictly-necessary cookies for security purposes.

These are functional and security cookies required to deliver the features you use — we run no third-party advertising or cross-site tracking. A notice is shown on your first visit, and this policy constitutes the full disclosure of every storage mechanism we and our embedded providers use.

5. Third-party services

We use the following third-party services to operate DoYourDD:

• Stripe — payment processing (stripe.com/privacy)
• Google Sign-In — optional account authentication (policies.google.com/privacy)
• Render.com — hosting, infrastructure, and our private database
• Cloudflare — DNS and security
• TradingView — embedded price charts on Due Diligence pages
• Anthropic Claude API — AI-generated analysis in Due Diligence reports. Ticker data is sent to the API; your email or personal details are never included in AI prompts.
• Finnhub, Tiingo, EOD Historical Data, MarketData.app — financial data providers. These receive only ticker symbols, not any personal data.
• Reddit (via Apify) and YouTube — public social-signal data sources. These receive only ticker symbols and company names, never personal data.

6. Data retention

We retain your email address and account data for as long as your account is active. If you delete your account or request erasure, we will remove your email and associated data from our systems within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. Stripe transaction records).

7. Your rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Restriction — ask us to restrict processing in certain circumstances

To exercise any of these rights, email [email protected]. We will respond within 30 days.

If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

8. International transfers

Our application is hosted on Render, with our primary database located in the EU (Frankfurt, Germany). Some of our processors (such as Stripe, Google, and Anthropic) process data in the United States. Where personal data is transferred outside the EU/UK, we rely on standard contractual clauses and our processors' respective compliance frameworks.

9. Children

DoYourDD is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with their data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.

11. Contact

For privacy-related questions or requests: [email protected]