Privacy Policy

INTRODUCTION

Stock Lens Inc. ("StockLens", "Company", "we", "us", or "our"), incorporated in Ontario, Canada, is the controller of your personal information. We respect your privacy and are committed to protecting it by complying with this policy and the Personal Information Protection and Electronic Documents Act (PIPEDA).

This policy describes how we collect, use, disclose, and protect the personal information of our customers and website users ("you"), and our practices for collecting, using, maintaining, protecting, and disclosing that information when you visit https://stocklens.com (our "Website").

We will only use your personal information in accordance with this policy unless otherwise required by applicable law. We take steps to ensure that the personal information that we collect about you is adequate, relevant, not excessive, and used for limited purposes.

Privacy laws in Canada generally define "personal information" as any information about an identifiable individual, which includes information that can be used on its own or with other information to identify, contact, or locate a single person.

Please read this policy carefully to understand our policies and practices for collecting, processing, and storing your information. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you indicate that you understand, accept, and consent to the practices described in this policy.

INFORMATION WE COLLECT ABOUT YOU

We collect and use the following categories of information:

• Identity and contact information: Email address and display name, collected via Google or Apple OAuth through Firebase Authentication, or via direct registration.
• Billing information: Stripe customer ID and subscription status. We do not store payment card numbers on our servers — all card data is handled directly by Stripe.
• Usage and analysis data: Tickers searched, analysis results generated, and timestamps of your activity on the platform.
• Watchlists and portfolio data: Companies you add to your watchlists or portfolio, and any associated settings.
• Analytics data: Hashed IP addresses used for first-party analytics. These are one-way hashed and are not used to identify individual users.
• Account preferences: Theme preference (light/dark), notification settings, and similar user interface preferences stored in your browser's localStorage or in our backend.
• Technical information: Browser type and version, time zone setting, operating system and platform, and information about your internet connection and the equipment you use to access our Website.
• Article read access: the subscription tier associated with your account is evaluated when you open an article to determine whether you receive a 25% preview (Free users, first 8 hours after publication) or the full article (Pro/Max, or Free after the 8-hour window).

HOW WE COLLECT INFORMATION ABOUT YOU

We use different methods to collect your information, including through:

• Direct interactions with you when you provide it to us, for example, by filling in forms or corresponding with us by email, or otherwise.
• Automated technologies or interactions, as you navigate through our Website. Information collected automatically may include usage details, hashed IP addresses, and information collected through strictly necessary cookies.
• OAuth providers (Google, Apple) when you authenticate through Firebase Authentication.
• Payment processors (Stripe) to confirm subscription status and billing history.

INFORMATION YOU PROVIDE TO US

The information we collect directly from you on or through our Website may include:

• Information that you provide by filling in forms on our Website. This includes information provided at the time of registering to use our Website or subscribing to our service.
• Records and copies of your correspondence (including email addresses), if you contact us.
• Your search queries on the Website, including ticker symbols you search for.
• Details of transactions you carry out through our Website and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Website.

COOKIES & SIMILAR TECHNOLOGIES

As you navigate through and interact with our Website, we use strictly necessary cookies and browser localStorage to ensure the functionality and security of the Website. In addition, subject to your consent, we use analytics cookies (Google Analytics 4) and advertising cookies (Google Ads). These are managed through Google Consent Mode v2 and are only set after you opt in via our cookie banner; until you choose, no analytics or advertising cookies are set.

For a complete list of the cookies and localStorage items we use, their purposes, and their durations, and to change your consent choices at any time, please see our Cookie Policy at https://stocklens.com/cookie-policy.

We use Cloudflare Turnstile for bot verification. Cloudflare may set cookies in connection with this service. These cookies are strictly necessary for the security of the Website.

If you disable strictly necessary cookies, certain parts of our Website may become inaccessible or non-functional, in particular the authentication system.

AI & MACHINE LEARNING PROCESSING

StockLens uses artificial intelligence and machine learning to provide analysis features. Specifically:

• FinBERT sentiment analysis: We run FinBERT-based sentiment models on publicly available financial filings, earnings call transcripts, and news articles. These models are hosted on our own infrastructure using ONNX Runtime and do not involve third-party AI processing services.
• AI narrative generation: AI-generated analysis narratives are created from aggregated financial data and model outputs. These narratives are probabilistic — they reflect model predictions, not factual reporting.
• No personal data in ML models: Your personal account information, email, billing details, watchlists, and portfolio data are never used as inputs to machine learning models. Models process only publicly available financial information.

AI-generated outputs do not constitute financial advice. See our Terms and Conditions for further disclaimers on AI-generated content.

ANALYTICS & ADVERTISING

We use both first-party analytics and, subject to your consent, third-party analytics and advertising services. With your consent, we use Google Analytics 4 to measure how the Website is used and Google Ads to measure the effectiveness of our advertising and record conversions (such as sign-ups and subscriptions). These services are gated behind Google Consent Mode v2 — until you opt in via our cookie banner, their storage signals default to denied and no analytics or advertising cookies are set. You can change your choices at any time; see our Cookie Policy. We do not use Meta Pixel, LinkedIn Insight Tag, or other third-party tracking scripts beyond Google Analytics and Google Ads.

Our first-party analytics collect page view events and usage signals using hashed IP addresses. Hashed IPs are derived from a one-way cryptographic hash and cannot be reversed to identify individual users. Analytics data is transmitted using the browser's native `navigator.sendBeacon` API where available.

Analytics data is retained per our data retention schedule described below.

When you open an article on stocklens.com/articles, we record an article_view analytics event to measure article engagement. Your subscription tier is associated with the view so we can determine whether you see a free-user preview or the full article.

HOW WE USE YOUR INFORMATION

We use information that we collect about you or that you provide to us, including any personal information:

• To present our Website and its contents to you.
• To provide you with information, products, or services that you request from us.
• To fulfill the purposes for which you provided the information or that were described when it was collected, or any other purpose for which you provide it.
• To provide you with notices about your account and subscription, including expiration and renewal notices.
• To carry out our obligations and enforce our rights arising from any contracts with you, including for billing and collection or to comply with legal requirements.
• To notify you about changes to our Website or any products or services we offer.
• To improve our Website, products or services, and customer experiences.
• For any other purpose with your consent.

THIRD-PARTY SERVICE PROVIDERS

We may disclose your personal information to the following third-party service providers who assist us in operating the platform. Each provider is contractually required to handle personal information in accordance with applicable privacy standards:

• Amazon Web Services (AWS) — Cloud hosting and message queuing. AWS infrastructure is primarily in the United States (US-East region).
• Cloudflare — Content delivery network (CDN), DDoS protection, and Cloudflare Turnstile bot verification. Cloudflare is based in the United States.
• Microsoft Azure — PostgreSQL database infrastructure and ML service hosting. Personal data stored in our application database is processed on Azure infrastructure.
• Stripe — Payment processing. Stripe is PCI-DSS compliant. No payment card data reaches StockLens servers — card data is processed and tokenized by Stripe directly. Stripe is based in the United States.
• GitHub — Source code repository and CI/CD pipelines. No personal data is stored in our source code repositories.
• Firebase / Google — Authentication services for Google and Apple OAuth sign-in. Firebase Authentication handles identity verification. Firebase is operated by Google and is based in the United States.

We may also disclose personal information:

• In accordance with applicable law, to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Stock Lens Inc.'s assets.
• To comply with any court order, law, or legal process, including to respond to any government or regulatory request, in accordance with applicable law.
• To enforce or apply our terms of use https://stocklens.com/terms-conditions and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Stock Lens Inc., our customers, or others.

INTERNATIONAL USERS

StockLens is a Canadian-based company operated under Canadian federal and Ontario provincial law. Your personal information is processed and stored on Amazon Web Services (AWS) servers in the United States (US-East region).

Honest notice on international data protection frameworks: StockLens does not currently operate an active GDPR compliance program for European users, nor a CCPA compliance program for California residents. Users outside Canada access the service at their own risk and are responsible for compliance with their local laws. PIPEDA (Canada's federal privacy law) is the primary governing framework for our data handling practices.

Whenever we engage a service provider that processes data outside Canada, we require that its privacy and security standards adhere to this policy and applicable Canadian privacy legislation.

By submitting your personal information or engaging with the Website, you consent to this transfer, storage, or processing of your information outside of Canada.

DATA SECURITY

The security of your personal information is very important to us. We use physical, electronic, and administrative measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All payment transactions are processed by Stripe using SSL/TLS encryption.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk.

DATA RETENTION

We retain your personal information for the following periods:

• Billing records — Retained for a minimum of 6 years from the date of the transaction, as required by Canadian tax and accounting legislation.
• Security logs (access logs, authentication events) — Retained for 90 days in active storage, then archived for up to 12 months for security investigation purposes.
• Account data — Deleted within 30 days of a verified account deletion request. Some residual data may remain in backups for up to 90 days following account deletion.
• Analysis history (tickers, results, timestamps) — Retained while your account is active. Deleted with your account upon account deletion.
• First-party analytics data — Retained for up to 24 months in aggregated or de-identified form.

Under some circumstances we may anonymize your personal information so that it can no longer be associated with you. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent.

CHILDREN UNDER THE AGE OF 13

Our Website is not intended for children under 13 years of age. No one under age 13 may provide any personal information to, or on, the Website. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Website or on or through any of its features, register on the Website, make any purchases through the Website, or provide any information about yourself to us. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at support@stocklens.com.

CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION

We strive to provide you with choices regarding the personal information you provide to us:

• Cookies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse strictly necessary cookies, please note that some parts of this Website may not be accessible or may not function properly. For more information about the cookies we use, see our Cookie Policy at https://stocklens.com/cookie-policy.
• Promotional Offers. If you have opted in to receive certain emails from us but no longer wish to have your email address used by the Company to promote our products or services, you can opt-out by contacting us at support@stocklens.com. If we have sent you a promotional email, you may unsubscribe by clicking the unsubscribe link included in the email.

WITHDRAWING YOUR CONSENT

Where you have provided your consent to the collection, use, and transfer of your personal information, you may have the legal right to withdraw your consent under certain circumstances. To withdraw your consent, if applicable, contact us at support@stocklens.com. Please note that if you withdraw your consent we may not be able to provide you with a particular product or service. We will explain the impact to you at the time to help you with your decision.

YOUR RIGHTS UNDER PIPEDA

PIPEDA grants you the right to access and correct the personal information we hold about you. To exercise these rights:

• Right of Access: You may submit a written access request to support@stocklens.com. You must email from the email address registered to your account. We may charge a minimal fee to cover reasonable administrative costs and will notify you of any applicable fee in advance. We will respond within 30 days of receipt of your request. If we cannot respond within 30 days, we will notify you of the reason and expected timeline.
• Right of Rectification: You may request a correction to any factual errors or omissions in your personal information. We will amend the information if you successfully demonstrate it is incomplete or inaccurate.
• Account Deletion: You may request deletion of your account and associated personal information by contacting us at support@stocklens.com. We cannot delete your personal information except by also deleting your user account. Billing records are retained as required by law regardless of account deletion.

We may request specific information from you to help us confirm your identity and your right to access. If we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

If you have concerns about how we handle your personal information that are not resolved through our process, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

PIPEDA COMPLIANCE COMMITMENT

StockLens is committed to compliance with PIPEDA and its ten principles of privacy: accountability, identifying purposes, consent, limiting collection, limiting use and disclosure, accuracy, safeguards, openness, individual access, and challenging compliance. Our privacy practices are designed to meet or exceed these standards.

If you have questions about our PIPEDA compliance or wish to challenge our privacy practices, please contact our Privacy Officer using the contact information below.

CHANGES TO OUR PRIVACY POLICY

It is our policy to post any changes we make to our privacy policy on this page with an updated effective date. If we make material changes to how we treat our users' personal information, we will notify you by email to the email address specified in your account.

You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting this privacy policy to check for any changes.

CONTACT INFORMATION AND CHALLENGING COMPLIANCE

We welcome your questions, comments, and requests regarding this privacy policy and our privacy practices.

Privacy Officer
Clint Deygoo
Stock Lens Inc.
Toronto, Ontario, Canada
support@stocklens.com

General Support
support@stocklens.com

We have procedures in place to receive and respond to complaints or inquiries about our handling of personal information, our compliance with this policy, and with applicable privacy laws. To discuss our compliance with this policy please contact our Privacy Officer using the contact information listed above.