Privacy Policy

The short version

The rest of this page is the detail. It is written to be read, not to be skimmed past. StockFly is operated by Sedat Kaan Gozum, a sole trader based in the United Arab Emirates, at https://stockfly.app. That is who is responsible for your data.

What we collect

Four things, and nothing else:

• Your Google account basics. When you sign in with Google we receive your name, your email address, and your profile picture. We use these to create your account and to know it is you when you come back.
• The portfolio data you give us. The holdings and transactions you type in or import from a spreadsheet: tickers, share counts, prices, dates, currencies, fees, dividend tax rates, and any notes you write. Plus your settings, like which currency you want to see and which portfolio is open.
• Your plan. Whether you are on free, on the trial, or on Pro, and the dates that go with it.
• How you found us. When you sign up, we note which of our pages you opened first and which website linked you to it (for example google.com), so we can tell which pages work.

What we do not collect

• Your brokerage login, ever. StockFly does not connect to brokers. There is nothing to link and we never ask.
• Your card details. If you subscribe, payment is handled entirely by Paddle. Your card number never touches our servers and we never see it.
• Behavioural data. No session recording, no advertising pixels, nothing that follows you from site to site. We do not know which buttons you click. What we do keep is a simple count of visits to our public pages from people who are not signed in: the page, the website that linked to it, the country and whether it was a phone or a computer. No IP address, no cookie, and nothing that says who you are. Vercel, which runs the website, counts page views for us in the same anonymous way, also without cookies.

Why we are allowed to hold it

We hold your account details and portfolio data because we need them to give you the service you asked for. That is the contract between us. We keep your plan status because we have to, in order to run a paid product and meet our tax and accounting obligations.

Who else touches it

We do not sell or rent your data to anyone. We do use a small number of companies to run StockFly, and each of them only ever sees the minimum they need:

• Google handles your sign in. We never see your Google password.
• Vercel runs the website and the servers behind it.
• Supabase hosts the database where your portfolio data lives.
• Yahoo Finance supplies market prices and dividend history. We ask it about tickers, not about you. It is never told who is asking.
• Google Gemini reads the file you upload when you import trades, and writes the news summary on a stock's page. It receives the contents of that file, or public news articles, and nothing else from your account.
• Resend delivers the emails we send you, like the welcome email. It receives your email address and the email itself.
• ExchangeRate-API supplies daily currency rates. It receives no personal data at all, just a request for today's rates.
• Paddle is our Merchant of Record and handles subscriptions and payments. If you subscribe, Paddle receives your name, your email, your country and your payment details, so it can take the payment and handle the tax. It never receives your portfolio data.

We may also have to hand over data if the law requires it. If that ever happens and we are allowed to tell you, we will.

Where your data lives

Your account and portfolio data are stored on servers in Tokyo, Japan, and the code that reads them runs in the same region. Some of the companies above are based elsewhere, including the United States, so your data may be processed there too.

How long we keep it

For as long as you have an account. If you ask us to delete it, we delete it. We keep a minimal record of payments for as long as tax and accounting rules require, because we are not allowed to throw those away.

What you can ask us for

Any of the following, at any time, by writing to us:

• A copy of everything we hold about you.
• A correction, if something is wrong.
• Deletion of your account and all of your data. StockFly does not have a delete button yet, so this one goes through email today. Write to us and we will do it within 30 days, and confirm when it is done.

Depending on where you live you may also have the right to complain to a data protection regulator. We would rather you told us first and gave us the chance to fix it.

Cookies and what sits on your device

StockFly uses one cookie to keep you signed in. When you arrive on our public pages, up to two small cookies also remember, for 30 minutes, which of our pages and which website brought you here, so that if you sign up in that time we can see which page worked. None of them holds anything about who you are, none is shared with anyone, and none follows you to other websites.

StockFly also stores a copy of your own portfolio data in your browser, so the app paints instantly instead of making you wait for the network on every page, along with a few display preferences such as dark mode. That copy sits on your device, belongs to you, and is cleared when you sign out or clear your browser data.

Children

StockFly is not for people under 18, and we do not knowingly collect their data.

Changes to this policy

If we change how any of this works, we will update this page and change the date at the top. If a change is significant, we will tell you rather than hoping you notice.

Contact

Anything at all about your privacy goes to support@stockfly.app. See also our Terms of Use and our Refund Policy.