Data Collection & Processing Policy

Last Updated: February 6, 2026

1. What Data We Collect

1.1 Account Data

Collected when you create an account:

  • Email address
  • Display name (optional)
  • Password (securely hashed using bcrypt)

Purpose: Authentication and personalization

Storage: MongoDB Atlas, encrypted at rest

Security: Passwords are never stored in plain text

1.2 Financial Data

Data you explicitly enter:

  • Stock symbols in watchlist
  • Portfolio holdings (shares, cost basis)
  • Price alerts and target prices
  • Custom notes on stocks

Purpose: Provide portfolio tracking and alerts

Important: We NEVER access your brokerage account or real trading data

1.3 Trademark Asset Data

Assets you track:

  • Trademark serial numbers and renewal dates
  • Asset Sniper watchlist items
  • Valuation scores and analysis history

Purpose: Expiration tracking, analysis, and alerts

1.4 AI Interaction Data

Automatically collected:

  • AI analysis requests (stock symbols analyzed)
  • AI recommendations received
  • Prediction accuracy (anonymized)
  • Pattern recognition data (anonymized)

Purpose: Improve AI accuracy and learning system

Note: Individual predictions are NOT shared; only aggregated accuracy metrics

1.5 Technical & Usage Data

Automatically collected:

  • IP address (for security and fraud prevention)
  • Browser type and version
  • Device type (desktop, mobile, tablet)
  • Operating system
  • Page views and feature usage
  • Session duration
  • Referral source

Purpose: Analytics, performance optimization, security

2. How We Store Data

Database

MongoDB (encrypted at rest)

Location: Secure cloud infrastructure

Encryption

HTTPS/TLS for all data transmission

AES-256 encryption for sensitive data

Backups

Daily automated backups

Retained for 30 days

Data Retention

Account data: Until deletion requested

Session data: 7 days (auto-expired)

Analytics: 90 days (aggregated)

3. How We Protect Data

  • Authentication: Email/password with bcrypt hashing and JWT tokens
  • Session Security: Bearer tokens with automatic expiration
  • API Security: Rate limiting and input validation
  • Access Control: Role-based permissions (user/admin)
  • Monitoring: Real-time security alerts
  • Compliance: Industry best practices, GDPR/CCPA ready

4. Third-Party Data Sharing

We share limited data with:

Alpha Vantage

Shares: Stock symbols you search/analyze

Purpose: Fetch real-time stock data

Resend (Email Service)

Shares: Email address (for alerts only)

Purpose: Send expiration and price alerts

Gemini AI (Google)

Shares: Stock symbols for analysis

Purpose: AI-powered stock analysis and recommendations

Finnhub

Shares: Stock symbols for sentiment analysis

Purpose: Market sentiment data

✓ We do NOT sell your data to advertisers or third parties

✓ We do NOT share your personal information with marketing companies

5. Your Data Rights

You have the right to:

  • Access: Request all data we have about you
  • Export: Download your data in CSV/JSON format
  • Correct: Update inaccurate information
  • Delete: Request complete account deletion
  • Opt-out: Disable specific data collection (may limit features)

To exercise these rights: Email privacy@zerodeficitpulse.com

6. Analytics & Cookies

Cookies Used:

  • session_token (Essential): Authentication (7-day expiry, HttpOnly, Secure)

Analytics: We use PostHog for anonymous usage analytics. You can opt-out in settings.

7. Data Deletion

Account Deletion Process:

  1. Request deletion in Profile → Privacy → Delete Account
  2. Confirmation email sent
  3. 30-day grace period (can cancel deletion)
  4. After 30 days: All personal data permanently deleted
  5. Anonymized analytics retained (no personal identifiers)

8. International Users

Data is processed in the United States. By using this service, you consent to data transfer and processing in the US, which may have different privacy laws than your country.

9. Changes to This Policy

We will notify you of material changes via:

  • Email notification
  • In-app banner
  • Updated "Last Modified" date

10. Contact

Questions about data collection?

Email: privacy@zerodeficitpulse.com

Data Protection Officer: dpo@zerodeficitpulse.com

Transparency Commitment: We believe in data transparency. If you have questions about how we handle your data, we're happy to explain in detail. Contact us anytime.