Short version: we collect the minimum needed to run your account and send you the alerts you asked for. We don't sell your data, we don't connect to your broker, and you can ask us to delete your account at any time.
1. What we collect
- Account details — your name, email address, username, password (stored only as a one-way hash), timezone and any avatar you upload.
- Portfolio data you enter — portfolio names, tickers, quantities, cost basis and notes. This is optional; the scanner works without it.
- Sign-in records — date, time, IP address and browser/device string of each sign-in. We use these to warn you about sign-ins from a new location.
- Notification history — which alerts we sent you, when, and to which address, so problems can be traced.
- Contact form submissions — the name, email, topic and message you send, plus the IP address it came from (for abuse prevention).
- Usage analytics — we use Google Analytics to understand which pages are used. It sets cookies and records anonymised page-view data. See Google's own privacy policy for details.
- Bot protection — public forms use Google reCAPTCHA, which may collect device and interaction data to tell people from bots, under Google's privacy policy and terms.
2. What we do not collect
- We never ask for, store or access brokerage logins, account numbers, card details or bank details.
- We do not place trades, hold funds or see your real positions unless you type them into the portfolio tracker yourself.
3. Why we use it
- To run your account: sign you in, show your portfolios, remember your settings.
- To send the alerts you have turned on (new trades, trades closed, password and security notices). You can switch email alerts off in your Profile.
- To keep the service safe: rate limiting, bot detection, new-device sign-in warnings, tracing delivery problems.
- To answer your messages.
- To improve the site using aggregate analytics.
4. Who we share it with
We do not sell or rent personal data. We share it only with services needed to operate the site: our hosting provider (Oracle Cloud), our email provider for outgoing mail, Google (Analytics and reCAPTCHA) and, if you use it, the "Open on TradingView" link, which takes you to TradingView's site. Market data comes from public sources and never includes anything about you. We may disclose data if required by law.
5. Cookies
The portal sets a session cookie and a CSRF token cookie so you stay signed in and forms can be submitted safely; a "keep me signed in" cookie if you tick that box; a small preferences store in your browser (chosen tab, sort order, market) that never leaves your device; and Google Analytics / reCAPTCHA cookies as described above. Blocking cookies will stop you signing in.
6. How long we keep it
- Account and portfolio data: for as long as your account exists. You can wipe your portfolio data yourself from Profile › Clear Portfolio Data.
- Sign-in and notification history: kept for security and support, trimmed periodically.
- Contact messages: kept in our mailbox as long as needed to deal with them.
- Server logs: rotated automatically, typically within a few weeks.
7. Where it lives and how it is protected
Data is stored on a server in the United States, served over HTTPS. Passwords are hashed, never stored in clear text. Access to the server is limited to the operator. No system is perfectly secure; if we learn of a breach affecting your data we will tell you as soon as we reasonably can.
8. Your choices and rights
- Update your name, email, timezone and password at any time in your Profile.
- Turn email alerts on or off in your Profile; bell notices can be cleared from the bell menu.
- Ask us to export or delete your account and all associated data — email us (below) and we will do it within 30 days.
- If you are in the EU/UK or another region with data-protection rights (access, correction, deletion, objection, portability), those rights apply and you can exercise them by contacting us.
9. Children
The service is not intended for anyone under 18, and we do not knowingly collect data from them.
10. Changes
If this policy changes in a meaningful way we will update the date at the top and, for material changes, tell signed-in users on their next visit.
11. Contact
Questions or requests about your data: info@tasteofmoksha.com.