1. Information We Collect
Account information
When you create an account, we collect your email address, display name, password hash, email verification status, subscription status, account settings, and account activity such as login, password reset, verification, and profile-update events. We do not store your password in plain text.
Subscription and billing information
Payments are processed by Stripe. We do not store full card numbers, CVV, or full payment credentials. We store Stripe customer identifiers, subscription identifiers, subscription status, billing events, and plan state needed to provide paid access.
Watchlist, portfolio, and research information
We store information you enter or generate in the Service, including watchlists, portfolio positions, cost basis, notes, options tracking, custom ETF/lab preferences, thesis checks, saved analysis, alerts, feedback, and feature preferences.
Brokerage connection information
If you connect a brokerage through SnapTrade, we may receive and store imported account metadata, institution names, holdings, balances, transactions/activity, realized trades, connection status, and authorization identifiers. We store SnapTrade user secrets or similar opaque broker tokens encrypted at rest. We do not receive your brokerage password.
Usage, device, and diagnostics information
We collect technical and usage information such as pages and features used, requests, timestamps, browser/device details, IP-derived request information, error logs, WebSocket connection state, and abuse-prevention signals. This helps run, secure, debug, and improve the Service.
2. How We Use Information
- Provide, personalize, secure, and maintain the Service.
- Authenticate users, keep sessions active, verify email addresses, and prevent abuse.
- Process paid subscriptions, billing portal access, and Stripe webhook events.
- Power watchlists, portfolios, broker sync, alerts, research pages, AI memos, daily briefs, thesis tools, and operational evidence features.
- Send transactional emails such as verification, password reset, billing, subscription, and account notices.
- Improve features, debug failures, measure reliability, and protect against fraud or unauthorized use.
- Comply with legal obligations and enforce our Terms of Service.
We do not sell your personal information.
3. AI and Model Processing
ICC uses AI providers, including OpenAI, to generate market briefs, stock analysis, portfolio commentary, thesis checks, narrative analysis, and other research outputs.
Prompts may include market data, company data, ticker symbols, watchlist entries, portfolio positions, user-entered notes, thesis text, and other context needed to generate the requested feature. We try to avoid sending unnecessary direct identifiers such as your email address, password, or payment details to AI providers.
AI outputs may be cached so the same analysis can load faster and avoid repeated model calls. AI outputs can be wrong or incomplete; see the Terms of Service for important research and investment disclaimers.
4. Third-Party Services and Data Providers
We use third parties to provide core parts of the Service. Depending on which features you use, these providers may process data as described in their own policies:
- Stripe for checkout, subscriptions, billing portal, and payment events.
- SnapTrade for optional brokerage connection, holdings, balances, account metadata, and transaction/activity import.
- OpenAI for AI-generated analysis and model-assisted features.
- Railway/Postgres hosting infrastructure for application hosting and database storage.
- Email/SMTP provider for transactional account and billing emails.
- Market and public-data providers such as Yahoo Finance, Financial Modeling Prep, FRED, SEC EDGAR, Nasdaq, StockAnalysis.com, Finnhub/news feeds, government records, and similar sources.
- Replicate for optional generated visual assets such as daily market mood artwork.
We may add, replace, or remove providers as the Service evolves.
6. Security
We use safeguards intended to protect the Service, including bcrypt password hashing, HTTPS/TLS, HttpOnly session cookies, rate limiting, security headers, encrypted storage for broker secrets, and access controls around authenticated APIs.
No internet service is perfectly secure. We cannot guarantee absolute security, and you should use a strong unique password and keep your email account secure.
7. Data Retention and Deletion
We retain account, subscription, watchlist, portfolio, broker, analysis, and usage information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, improve reliability, and enforce our agreements.
Authenticated sessions expire after a limited period. Some generated analysis, logs, snapshots, and derived data may be cached for performance or auditability.
You can delete your account from the account/profile area. Account deletion removes the account and associated personal account data from the active application database, subject to legal, security, backup, fraud-prevention, and operational retention needs. Some anonymized, aggregated, or de-identified information may be retained.
8. Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information. California residents may have rights to know, delete, correct, and opt out of sale or sharing of personal information; we do not sell personal information.
To exercise privacy rights, use available account controls or contact us. We may need to verify your identity before acting on a request.
9. Children's Privacy
The Service is not intended for anyone under 18. We do not knowingly collect personal information from children.
10. International Users
The Service is operated from the United States. If you access it from outside the United States, your information may be processed in the United States and other countries where our providers operate.
11. Changes to This Policy
We may update this Privacy Policy as the Service changes. Material updates may be announced by email, in-app notice, or posting an updated version.
12. Contact
Privacy questions or requests can be sent to [email protected].