1. Who we are

DoYourDD is a financial data and analytics service operated at YOUR_DOMAIN. We provide social-signal stock momentum analysis to retail investors. If you have questions about this policy, contact us at privacy@YOUR_DOMAIN.

2. What data we collect

We collect the minimum data needed to operate the service:

• Email address — collected when you register for a free or paid account. Used to issue your access token and, if you consent, to send product updates.
• Payment information — processed entirely by Stripe. We never see or store your card details. Stripe may retain billing data per their own privacy policy.
• Usage data — we log which tickers you run Due Diligence reports on in order to enforce your monthly quota and improve the service. This data is stored in a private Google Sheet accessible only to us.
• Watchlist and trading log entries — if you use these features, entries are stored in your browser's local storage and optionally synced to a private Google Sheet. We do not use this data for any purpose other than displaying it back to you.

We do not collect browsing history, device fingerprints, or any information beyond what is listed above.

3. How we use your data

• To provide, maintain, and improve the service
• To issue and validate your access token
• To enforce usage quotas (free vs. paid tier)
• To process payments via Stripe
• To send transactional emails (account confirmation, payment receipts) — these cannot be opted out of as they are necessary to deliver the service
• To send product update emails, only if you explicitly opt in

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

4. Cookies and local storage

DoYourDD does not set tracking cookies. We use your browser's local storage to persist your login session, watchlist, and saved reports. This data never leaves your device unless you are logged in to a paid account, in which case it may be synced to our private data store as described above.

Stripe's hosted checkout page sets its own cookies when you initiate a payment. These are governed by Stripe's privacy policy and are outside our control.

Because we do not use tracking cookies or third-party analytics scripts, a cookie consent banner is not required under most regulations. If you visit from a jurisdiction that requires disclosure of any storage mechanism, this policy constitutes that disclosure.

5. Third-party services

We use the following third-party services to operate DoYourDD:

• Stripe — payment processing (stripe.com/privacy)
• Google Sheets — private data store for user accounts and logs, accessed only by our backend
• Render.com — hosting and infrastructure
• Anthropic Claude API — AI-generated analysis in Due Diligence reports. Ticker data is sent to the API; your email or personal details are never included in AI prompts.
• Finnhub, Tiingo, EOD Historical Data, MarketData.app — financial data providers. These receive only ticker symbols, not any personal data.

6. Data retention

We retain your email address and account data for as long as your account is active. If you delete your account or request erasure, we will remove your email and associated data from our systems within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. Stripe transaction records).

7. Your rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Restriction — ask us to restrict processing in certain circumstances

To exercise any of these rights, email privacy@YOUR_DOMAIN. We will respond within 30 days.

If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

8. International transfers

Our infrastructure is hosted in the United States. If you access DoYourDD from outside the US, your data will be transferred to and processed in the US. By using the service, you consent to this transfer. We rely on standard contractual clauses and our processors' respective compliance frameworks for transfers from the EU/UK.

9. Children

DoYourDD is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with their data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.

11. Contact

For privacy-related questions or requests: privacy@YOUR_DOMAIN