Learn how StoqPulse collects, uses, and safeguards your personal data, and your rights under PIPEDA, GDPR, and CCPA.
Last updated: July 3, 2026
1. Who we are
StoqPulse, Inc. ("StoqPulse", "we", "us") operates the StoqPulse stock-research application and website. This policy explains how we handle information when you use our services.
2. Information we collect
Account data you provide: email address, display name, and optional profile details (phone, company, avatar image, base currency, time zone).
Product data you create: watchlists, portfolio positions, price targets, decision-journal entries, saved screens, alerts, and AI chat conversations.
Usage data: pages viewed, features used, approximate timing, and diagnostic/error logs generated automatically as you use the app.
Authentication data handled by our managed identity provider (AWS Cognito), such as verification codes and session tokens. We never store your password — sign-in uses one-time email codes.
Technical and device data: IP address, browser type and version, device type, operating system, and referring URL — automatically recorded by our servers and infrastructure when you access the service.
Children's data: our service is intended solely for users 18 years of age or older (see Terms of Use, Section 2). We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us and we will promptly delete it.
3. Cookies and browser storage
We use session cookies and browser local/session storage solely to keep you signed in and maintain application state. We do not use third-party advertising cookies or cross-site tracking.
We may collect first-party, aggregate analytics to understand how features are used. You can clear cookies through your browser settings at any time, though doing so will sign you out of the application.
4. How we use your information
To provide the service: store your portfolio/watchlist/decisions, compute scores, generate AI insights grounded in your own data, and personalize the experience.
To operate and improve: maintain security, debug, analyze aggregate usage trends, and develop new features.
To communicate: send transactional messages (verification, billing, alerts you enable) and, only if you opt in, product or marketing updates.
Lawful basis for processing (GDPR/UK GDPR): where these laws apply, we process your personal data (i) to perform the contract with you — creating your account and delivering the service; (ii) based on our legitimate interests — securing the service, preventing fraud, and conducting aggregate usage analytics, balanced against your rights and freedoms; and (iii) based on your consent where required (e.g., optional marketing emails). You may withdraw consent at any time; this does not affect the lawfulness of processing that occurred before withdrawal.
5. AI features and third-party data
AI responses are generated via a managed AI service and associated foundation-model providers. When you use AI features, relevant prompts and your own account context may be transmitted to the underlying model to produce a response. We do not use your data to train third-party models.
Market, fundamentals, macro, filings, and news data are sourced from third-party market data providers. We do not control and are not responsible for their accuracy or availability.
6. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only with service providers who help us run the product (cloud infrastructure and identity providers, AI service providers, Stripe billing, and market-data providers) under appropriate data-processing agreements, or when required by law.
Your data is tenant-isolated: other users cannot access your portfolio, watchlist, decisions, or conversations.
7. International data transfers
StoqPulse is operated from Canada. If you access the service from outside Canada, your information may be transferred to and processed in Canada, the United States, or other countries where our infrastructure providers operate. We rely on standard contractual clauses or equivalent mechanisms where required.
8. Data retention & security
We retain your data while your account is active and as needed for legal, security, or operational purposes. You can delete chats and most product data in-app at any time.
You can permanently delete your entire account and all associated data yourself, at any time, from Settings → Delete account & data in the app. This immediately and irreversibly erases your profile, portfolios and positions, watchlists, decision-journal entries, price targets, saved screens, saved backtests, alerts and alert history, notifications, and AI chat history, deletes your sign-in credentials, and cancels any active subscription. If you are unable to reach this option, you may request deletion by emailing us at the address below. We may retain a limited amount of information where required for legal, tax, fraud-prevention, or dispute-resolution purposes, after which it is deleted.
We use industry-standard measures (TLS encryption in transit, AES-256 at rest, IAM access controls, managed AWS infrastructure). No method of transmission or storage is 100% secure.
Security incidents: if a personal-data breach is likely to result in a risk to your rights and freedoms, we will notify the applicable supervisory authority within 72 hours of becoming aware (where required by GDPR/UK GDPR) and will notify affected individuals as required by applicable law, including PIPEDA and applicable provincial privacy legislation.
9. Your choices & rights
You can access and update your profile, export or delete your data in-app — including permanently deleting your entire account and all associated data from Settings → Delete account & data — and opt out of non-essential emails at any time.
Depending on your jurisdiction, you may have additional rights — including the right to access, correct, delete, or port your personal data, or to object to or restrict certain processing. Canadian residents have rights under PIPEDA (or applicable provincial privacy legislation). EU/UK residents may have rights under the GDPR/UK GDPR. California residents may have rights under the CCPA/CPRA. To exercise any of these rights, contact us at the address below.
If you are an EU or UK resident and we have not resolved a data-rights request to your satisfaction, you may lodge a complaint with your national data protection supervisory authority (for example, the ICO in the UK, or the relevant EU Member State DPA). Canadian residents may contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca).
10. Changes & contact
We may update this policy and will revise the version date above. We will communicate material changes by posting a notice on this page and, where practicable, by notifying you via your registered email address or an in-app notification. Where a change materially affects your rights or our data-processing activities, we will seek renewed acceptance before you continue using the service.
Questions or data-rights requests: legal@stoqpulse.com.