Privacy Policy

Last updated: October 13, 2026

1. What We Collect

You can use most of TradeFlare (Flare List, Signal History, Market Analysis, Smart Money, blog) without an account; for that we collect no personal identifiers. If you create an account, here is exactly what we store:

• Account details: your email address, your first and last name, and — if you sign in with Google — your Google account ID and profile photo URL. If you sign up with email and password, we store your password only as a salted one-way hash (we can never see your password).
• Your watchlist and holdings: the stock symbols you add to My List and, if you choose to enter them, your buy price, number of shares, buy date, target and stop levels, and allocation. We store these only to show you prices, profit/loss, portfolio analytics and the AI portfolio review for those stocks. Entering holdings is optional.
• Holdings import: if you use "Import holdings", the text you paste or the screenshot you upload is read once by an AI model to find the ticker, number of shares, average cost and currency of each position. We do not keep the pasted text or the screenshot. Only the rows you review and confirm are saved. Account numbers, names and cash balances in the paste are not stored.
• Activity record: for signed-in users, a log of the actions taken in the account (for example: opened My List, added or removed a stock, ran research, imported holdings) with the time and the ticker involved. It does not record amounts or what you type. We use it for support, to improve the product and to detect abuse; it is deleted with your account.
• Consent record: the version of the Terms and Privacy Policy you accepted, when you accepted it, and the IP address and browser used.
• Usage counters: how many on-demand AI research requests you run per day (to enforce daily limits) and the date you accepted our disclaimer.
• Ticker requests: symbols you ask us to add, linked to your account so we can tell you when they are approved.
• Access requests: if you ask for access, we keep your email, the page you asked from and how you found the site, only to reply to you about access. We delete it if you ask, and when we decline the request.
• Server logs: standard web server logs (IP address, browser type, pages visited, timestamp) retained for up to 30 days for security and debugging.
• Analytics: we use Google Analytics to understand aggregate traffic (which pages are visited, roughly from where). We do not use it for advertising or cross-site profiling.

2. How We Use It

• To run your account, show your personal list, and research the stocks on it each night. Important: the AI research for any given stock is the same for every user and is not tailored to you.
• To produce the AI portfolio review on your Portfolio page and the "Your position" note on the page of a stock you own, if you turned this on. This review does use your own positions (ticker, shares, cost, weight) together with the shared research on each stock, to point out things such as concentration, a holding below its research stop level, or holdings without current research. It is automated educational commentary. It is not personal investment advice, it does not know your financial situation, goals or tax position, and it never tells you to buy or sell.
• To send you account emails: password-reset links and account notices; and, only if you turn it on in Account settings, a daily research email with your holdings, their research status and your watched stocks. Every daily email has a one-click unsubscribe link. We do not send marketing email.
• To enforce plan limits and keep the service secure (rate limiting, abuse prevention).

3. What We Do NOT Do

• We never sell, rent, or trade your personal data to anyone.
• We never connect to or store your brokerage account. Our published "paper trading" results use a simulated account with no real money and no user data.
• We do not use advertising trackers (no Facebook Pixel, no ad remarketing) and do not build advertising profiles.
• We do not share your watchlist or holdings with anyone. Aggregated, anonymous counts (for example, "how many users track AAPL") may be used to decide which stocks to research nightly.

4. Cookies

TradeFlare uses a functional session cookie to keep you signed in (secure, HTTP-only, expires after 90 days without a visit), a short-lived cookie (up to 10 minutes) that passes sign-in, search and list events to our analytics, and small browser-storage preferences such as your disclaimer acknowledgement. Google Analytics sets its own analytics cookies. We do not use advertising cookies.

5. Third-Party Services

These services process some data on our behalf, each under its own privacy policy:

• Google Sign-In — authenticates you and gives us your name, email and profile photo. You can also use email and password instead.
• Resend — delivers our transactional emails (for example, password resets); it receives your email address and the message.
• Cloudflare — protects and speeds up the site; it sees your IP address and requests like any web proxy.
• Google Analytics — aggregate site usage statistics.
• Google Gemini API (AI model provider) — generates the research, the portfolio review and reads holdings imports. For the portfolio review it receives your positions (ticker, shares, cost, weight) without your name or email. For an import it receives the text or screenshot you submit. We use the paid API; see Google's Gemini API terms for how it handles data sent through the API.
• Market data providers (Yahoo Finance, SEC EDGAR, Alpaca market data) — supply prices, fundamentals and filings. Your personal data is never sent to them; we only request public market data.
• Google Fonts / Font Awesome CDN — typography and icons; these may log your IP as part of delivery.

6. Data Storage, Security & Retention

Your data is stored on our own server in an encrypted-at-rest environment and transmitted only over HTTPS. Passwords are hashed; session cookies are secure and HTTP-only. Account data is kept for as long as your account exists. Server logs are deleted after 30 days. Nightly backups are retained for a limited period and then deleted.

7. Your Rights

You can view and edit your name in Account settings, and add or remove stocks and holdings on My List at any time. You may request a copy of the data we hold about you, or ask us to delete your account and all associated data (watchlist, holdings, usage history), by emailing [email protected] — we complete deletion within 30 days. You can do both yourself in Account settings: "Delete my holdings" removes your list, positions and stored portfolio results immediately, and "Delete my account" removes the account and everything tied to it. Residents of Canada (PIPEDA), the EU/UK (GDPR) and California (CCPA) have additional statutory rights, including access, correction, portability and the right to complain to a supervisory authority; we honour these for all users regardless of location.

8. Children

TradeFlare is not directed at children under 18 and we do not knowingly collect data from them. If you believe a minor has created an account, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will update the "Last updated" date at the top when changes are made. Continued use of the platform constitutes acceptance.

10. Contact

Privacy questions: [email protected]

---

Also see our Terms of Service.  ·  Home