Privacy Policy

This Privacy Policy explains how EON Risk Services LTD ("Company", "we", "us", or "our") collects, uses, discloses, and protects your personal information when you use the StockAnalytics.AI website and services (the "Service").

We are committed to protecting your privacy and handling your data in accordance with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

1. Data Controller

EON Risk Services LTD is the data controller responsible for your personal data.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name (if provided), and profile information when you create an account
• Authentication Data: Login credentials and authentication tokens (passwords are hashed and never stored in plain text)
• Communication Data: Information you provide when contacting us, including support requests and feedback
• Portfolio Data: Stock tickers, weights, and portfolio compositions you enter into our analysis tools (this data is associated with your account to provide the service)
• Request Data: Custom ticker analysis requests you submit

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, videos watched, and interactions with our Service
• Device Information: Browser type, operating system, device type, and screen resolution
• Log Data: IP address, access times, referring URLs, and pages viewed
• Cookies: Session identifiers and preferences (see Section 7 for details)

2.3 Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name, email address, and profile picture from Google
• Payment Provider: LemonSqueezy provides us with transaction confirmations, subscription status, and billing country (but NOT your full payment card details)

3. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

4. How We Use Your Information

We use your personal information to:

• Provide the Service: Create and manage your account, deliver video content, process analysis requests, and provide portfolio analysis tools
• Process Payments: Manage subscriptions, process payments, and handle billing inquiries
• Communicate: Send service-related emails, respond to inquiries, and provide customer support
• Improve the Service: Analyze usage patterns, identify issues, and develop new features
• Security: Detect and prevent fraud, unauthorized access, and other security threats
• Legal Compliance: Comply with applicable laws, regulations, and legal processes

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers

• LemonSqueezy: Payment processing and subscription management (processes billing information)
• Cloud Hosting: Database and infrastructure providers that store and process data on our behalf
• Email Services: Transactional email delivery for account notifications
• AI Services: Third-party AI providers that help generate analysis content (no personal user data is shared with these services)

5.2 Legal Requirements

We may disclose your information if required to:

• Comply with a legal obligation, court order, or government request
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the safety of users or the public

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change.

6. International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States (where some of our service providers are located).

When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with an EU adequacy decision
• Data processing agreements with our service providers

7. Cookies and Tracking Technologies

7.1 Cookies We Use

7.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features of our Service.

7.3 Do Not Track

We do not currently respond to "Do Not Track" browser signals. We do not use third-party advertising cookies or cross-site tracking.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure password hashing
• Access controls and authentication
• Regular security assessments
• Employee training on data protection

Important: While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

9. Data Retention

We retain your personal information for as long as necessary to:

• Provide you with our Service while your account is active
• Comply with legal obligations (e.g., tax records)
• Resolve disputes and enforce our agreements

Retention Periods

• Account Data: Retained while account is active, deleted within 90 days of account deletion request
• Billing Records: Retained for 7 years for tax and legal compliance
• Usage Logs: Retained for 12 months
• Support Communications: Retained for 3 years

10. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Exercising Your Rights

To exercise any of these rights, please contact us at privacy@stockanalytics.ai. We will respond to your request within one month.

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC) if you believe your rights have been violated: dataprotection.ie

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will take steps to delete such information.

12. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last updated" date
• Sending an email notification for significant changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: