Privacy Policy

Effective Date: July 22, 2026

1. Information We Collect

We collect the following types of information:

a. Account Information

• Name, email address, and phone number
• Google account profile information (when signing in via Google OAuth)
• Billing address and payment method details (processed securely via Stripe)

b. Investment Data

• Stock symbols and symbol lists you create
• Report generation history and preferences
• Investment strategy selections

c. Usage Data

• Device type, browser, and operating system
• IP address and approximate location
• Pages visited and features used
• Login timestamps
• Referring website and advertising campaign identifiers (for example, utm_source parameters or a click identifier appended by an ad platform to a link you followed to our site)

d. Communication Data

• Email addresses registered for report notifications
• Phone numbers registered for SMS notifications

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Grade My Investments platform
• Generate and deliver investment analysis reports
• Send report notifications via email and SMS
• Process payments and manage your subscription
• Authenticate your identity and secure your account
• Send login notifications for account security
• Respond to support requests
• Measure how visitors find Grade My Investments and how effective our advertising is
• Comply with legal obligations

3. Information Sharing

We do not sell or rent your personal information, and we never share your investment data — your symbol lists, report contents, or grades — with anyone.

a. Platform Service Providers

We share information with the following providers solely for the purpose of operating the Grade My Investments platform:

• Stripe — for secure payment processing
• SendGrid — for delivering email notifications and reports
• Twilio — for delivering SMS notifications
• Google — for authentication via Google OAuth
• Financial Modeling Prep — for retrieving stock market data used in reports
• Microsoft Azure — for cloud hosting and data storage

These service providers are contractually obligated to protect your data and use it only for the services they provide to us.

b. Analytics and Advertising Partners

We advertise Grade My Investments on third-party platforms, and we need to know which ads actually lead to sign-ups. To measure that, our public pages and web application include analytics and advertising tags from:

• Google Analytics — aggregate traffic and usage measurement
• Google Ads — conversion measurement for our advertising on Google
• Reddit Ads — conversion measurement for our advertising on Reddit

These tags receive the pages you visit on our site, your IP address, your browser and device type, and — when you complete a key action such as creating an account, adding a payment method, or generating a report — the fact that the action occurred and, for a report, the amount charged. To improve the accuracy of that measurement, we also send Reddit a cryptographically hashed (SHA-256) version of your email address along with an internal account identifier. Your email address is hashed in your own browser before it is transmitted; we do not send it to Reddit in plain text.

We never send these partners your investment data, symbol lists, report contents, grades, payment card details, or phone number.

Depending on where you live, this kind of advertising measurement may be treated as "sharing" or "targeted advertising" under privacy laws such as the California Consumer Privacy Act (CCPA/CPRA) or the GDPR. See Section 7 for how to opt out.

4. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure storage of sensitive credentials in Azure Key Vault
• Server-side API key protection (API keys are never exposed to client applications)
• Authentication and authorization controls on all API endpoints
• Account ownership validation to prevent unauthorized data access
• Rate limiting to prevent abuse
• HTML content sanitization to prevent cross-site scripting (XSS)
• Security headers (HSTS, CSP, X-Frame-Options) on all responses

While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data, and any transmission of information is at your own risk. In the event of a data breach that affects your personal information, we will notify affected users in accordance with applicable law.

5. Data Retention

We retain your account data and report history for as long as your account is active. If you close your account, we will delete your personal data within 90 days, except where we are required to retain it for legal or compliance purposes. Database backups are retained for up to 35 days for disaster recovery purposes and are automatically purged after that period. You may request a full export of your data at any time through the platform's data export feature.

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of SMS notifications at any time by replying STOP
• Opt out of email notifications by managing your notification settings
• Opt out of analytics and advertising measurement, including the sharing described in Section 3(b) — see Section 7

7. Cookies, Local Storage, and Tracking Technologies

Essential. Grade My Investments uses cookies and browser local storage for authentication, session management, and remembering preferences such as your light or dark theme. These are required for the platform to function and cannot be turned off.

Analytics and advertising. The Google and Reddit tags described in Section 3(b) set their own cookies and read advertising identifiers in order to recognize returning visitors and attribute sign-ups to the ads that produced them. These are third-party cookies used for analytics and advertising purposes.

You can opt out of this measurement in any of the following ways. The platform remains fully functional with these tags blocked:

• Block third-party cookies in your browser settings, or use a browser or extension that blocks tracking scripts.
• Install the Google Analytics Opt-out Browser Add-on.
• Adjust your Google ad personalization settings at My Ad Center.
• Adjust your Reddit ad personalization under Settings → Privacy in your Reddit account.
• Email us at inquiries@leoparddata.com and ask us to stop sharing your information for advertising measurement. We will honor the request for your account.

8. Children's Privacy

Grade My Investments is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the platform or sending an email to your registered address. Your continued use of Grade My Investments after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Email: inquiries@leoparddata.com