Privacy Policy

SmallCap Scanner (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services (collectively, “the Service”). By using the Service, you consent to the data practices described in this policy.

Account Information. When you create an account, we collect your email address and any display name you choose to provide. Authentication is managed through Supabase Auth, which may support email/password login and third-party OAuth providers (such as Google). We store your user ID, email address, and authentication metadata.

Payment Information. When you subscribe to a paid plan, payment processing is handled entirely by Stripe, Inc. We do not store your credit card number, bank account details, or other sensitive financial data on our servers. We receive and store your Stripe customer ID and subscription status to manage your account access. Please refer to Stripe's Privacy Policy for details on how Stripe handles your payment information.

Usage Data. We collect anonymized usage analytics to improve the Service. This may include pages visited, features used, time spent on the platform, browser type, device type, operating system, and referring URLs. This data is collected in aggregate and is not linked to your personal identity.

Watchlist and Preferences. We store the stocks you add to your personal watchlist, your screening filters, and other preference settings to provide a personalized experience.

We use the information we collect to: (a) provide, operate, and maintain the Service; (b) process your subscription and manage billing; (c) personalize your experience, including your watchlist and saved preferences; (d) communicate with you about your account, including service updates and security alerts; (e) analyze usage patterns to improve the Service; (f) detect, prevent, and address fraud, abuse, or technical issues; and (g) comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties. We share data only with the following service providers, who process data on our behalf:

Supabase — Authentication and database hosting. Your account data is stored in Supabase's infrastructure.

Stripe — Payment processing. Stripe receives your payment details directly and provides us only with a customer ID and subscription status.

Vercel — Application hosting and edge delivery. Server logs may include IP addresses and request metadata.

We may also disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We use essential cookies to maintain your authentication session and remember your preferences. We may use anonymized analytics cookies to understand how users interact with the Service. We do not use third-party advertising cookies. You can configure your browser to refuse cookies, but some features of the Service may not function properly without them.

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Anonymized usage analytics may be retained indefinitely.

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), secure authentication through Supabase, and restricted access to production databases. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to: (a) access the personal information we hold about you; (b) request correction of inaccurate data; (c) request deletion of your data; (d) object to or restrict certain processing of your data; (e) request data portability; and (f) withdraw consent at any time where processing is based on consent. To exercise any of these rights, please contact us at the email address below.

Your data may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your country of residence.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child under 18, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after any changes constitutes acceptance of the revised policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@smallcapscanner.com.