Privacy Policy

The short version

The rest of this page is the detail. It is written to be read, not to be skimmed past. StockFly is operated by Sedat Kaan Gozum, a sole trader based in the United Arab Emirates, at https://stockfly.app. That is who is responsible for your data.

What we collect

Three things, and nothing else:

• Your Google account basics. When you sign in with Google we receive your name, your email address, and your profile picture. We use these to create your account and to know it is you when you come back.
• The portfolio data you give us. The holdings and transactions you type in or import from a spreadsheet: tickers, share counts, prices, dates, currencies, fees, dividend tax rates, and any notes you write. Plus your settings, like which currency you want to see and which portfolio is open.
• Your plan. Whether you are on free, on the trial, or on Pro, and the dates that go with it.

What we do not collect

• Your brokerage login, ever. StockFly does not connect to brokers. There is nothing to link and we never ask.
• Your card details. If you subscribe, payment is handled entirely by Paddle. Your card number never touches our servers and we never see it.
• Behavioural data. No analytics, no session recording, no advertising pixels, no third party tracking scripts. We genuinely do not know which buttons you click.

Why we are allowed to hold it

We hold your account details and portfolio data because we need them to give you the service you asked for. That is the contract between us. We keep your plan status because we have to, in order to run a paid product and meet our tax and accounting obligations.

Who else touches it

We do not sell or rent your data to anyone. We do use a small number of companies to run StockFly, and each of them only ever sees the minimum they need:

• Google handles your sign in. We never see your Google password.
• Vercel runs the website and the servers behind it.
• Supabase hosts the database where your portfolio data lives.
• Yahoo Finance supplies market prices and dividend history. We ask it about tickers, not about you. It is never told who is asking.
• ExchangeRate-APIsupplies daily currency rates. It receives no personal data at all, just a request for today's rates.
• Paddle is our Merchant of Record and handles subscriptions and payments. If you subscribe, Paddle receives your name, your email, your country and your payment details, so it can take the payment and handle the tax. It never receives your portfolio data.

We may also have to hand over data if the law requires it. If that ever happens and we are allowed to tell you, we will.

Where your data lives

Your account and portfolio data are stored on servers in Tokyo, Japan, and the code that reads them runs in the same region. Some of the companies above are based elsewhere, including the United States, so your data may be processed there too.

How long we keep it

For as long as you have an account. If you ask us to delete it, we delete it. We keep a minimal record of payments for as long as tax and accounting rules require, because we are not allowed to throw those away.

What you can ask us for

Any of the following, at any time, by writing to us:

• A copy of everything we hold about you.
• A correction, if something is wrong.
• Deletion of your account and all of your data. StockFly does not have a delete button yet, so this one goes through email today. Write to us and we will do it within 30 days, and confirm when it is done.

Depending on where you live you may also have the right to complain to a data protection regulator. We would rather you told us first and gave us the chance to fix it.

Cookies and what sits on your device

StockFly uses one cookie, and it exists only to keep you signed in. It is not used to track you and it is not shared with anyone. There is no cookie banner because there is nothing to consent to.

StockFly also stores a copy of your own portfolio data in your browser, so the app paints instantly instead of making you wait for the network on every page. That copy sits on your device, belongs to you, and is cleared when you sign out or clear your browser data.

Children

StockFly is not for people under 18, and we do not knowingly collect their data.

Changes to this policy

If we change how any of this works, we will update this page and change the date at the top. If a change is significant, we will tell you rather than hoping you notice.

Contact

Anything at all about your privacy goes to support@stockfly.app. See also our Terms of Use and our Refund Policy.