Privacy Policy

Depending on how you use the Service, we may collect:

• Account information, such as your name and email address.
• Portfolio and holdings information you enter or upload, including symbols, quantities, and cost basis.
• Subscription and billing status, such as your plan and whether your subscription is active.
• Usage information, such as the features you interact with and actions you take in the Service.
• Device and technical information, such as browser type, IP address, and similar data collected automatically.
• Communications you send to us, such as support requests.

If you sign in with a password, it is stored using one-way hashing managed by our authentication system. This means we do not store, and cannot see, your plaintext password. You are responsible for keeping your password confidential.

Payments for paid plans are processed by Stripe, our third-party payment processor. Your payment card details are collected and handled by Stripe under its own terms and privacy policy. Compound OS does not store your full payment card number. We may retain limited, non-sensitive billing information such as your subscription status and a payment-processor customer identifier.

We use the information we collect to:

• Create and operate your account and authenticate you.
• Provide portfolio, market-data, and AI-powered features.
• Process and manage subscriptions and billing.
• Secure the Service and detect, prevent, and respond to abuse or technical issues.
• Improve and develop the product.
• Communicate with you about your account, updates, and support.

To provide AI-powered features, the portfolio and market information needed to generate an analysis is processed by AI service providers on our behalf. This processing is used to produce the requested output and to operate the feature.

We rely on third-party service providers to operate the Service — for example, hosting, database, market-data, AI processing, and payment processing. These providers may process your information only as necessary to perform services for us.

We do not share your personal information except with the service providers described above as needed to operate the Service, when required by law, or to protect our rights, users, or the security of the Service. We may share information in connection with a business transfer such as a merger or acquisition.

We retain your information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or de-identify it.

We take reasonable technical and organizational measures designed to protect your information, including hashing of passwords and access controls that scope your data to your account. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You can review and update your account information in your settings, and you can cancel your subscription through the customer portal. You may request access to or deletion of your account information by contacting us using the details below; some information may be retained where permitted or required by law.

We use cookies and similar session technologies that are necessary to keep you signed in and to operate core functionality of the Service. Disabling these may prevent parts of the Service from working properly.

The Service is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can take appropriate action.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

Placeholder for owner review: add a privacy contact email or address before launch (for example, privacy@yourdomain.com). No privacy email is configured in the application at this time.