Privacy Policy

Effective Date: March 11, 2026 Version: 2026.03.11

1. Introduction

StrikeZoneInvesting (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use our stock screening and monitoring service (“the Service”). By using the Service, you consent to the data practices described in this Privacy Policy.

This Privacy Policy is incorporated into and forms part of our Terms of Service. Capitalised terms used but not defined in this Privacy Policy have the meanings given to them in the Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

Account information: Email address, display name, and password when you create an account. Passwords are stored using industry-standard one-way hashing — we never store or have access to your plaintext password.
Profile information: Any additional profile details you choose to provide, such as display name changes or preferences.
Subscription and billing information: Your selected subscription tier and billing period. Payment processing is handled by third-party payment processors; we do not directly store full payment card details.
Investment research data: Information you create within the Service, including screening criteria, questions, watchlist entries, portfolio entries, custom lists, entry and exit criteria, notes, and other research parameters.
Support and communications: Information you provide when submitting support requests, feedback, or other communications to us, including the content of your messages and any attachments.
Marketing signup information: Email address and other information you provide if you sign up for early access, newsletters, or other marketing communications through our website.

2.2 Information Collected Automatically

When you access or use the Service, we may automatically collect certain information, including:

Usage data: Pages visited, features used, actions taken, and interaction patterns within the Service.
Device and browser information: Browser type and version, operating system, screen resolution, device type, and language preferences.
Log data: IP address, access times, referring URLs, request and response metadata, and error logs, collected for security, debugging, and performance monitoring purposes.
Performance data: Page load times, application errors, and other technical metrics used to monitor and improve the Service.

2.3 Information from Third Parties

We may receive information from third-party service providers that we use to operate and enhance the Service. This may include market data, financial metrics, and AI-generated analysis. Such data is used within the application to support the features you use and does not include your personal information unless separately provided by you.

3. How We Use Your Information

We use your information to operate, maintain, and improve the Service and to provide you with a smooth and effective application experience. Specific uses include, but are not limited to:

Providing and enhancing the Service: Delivering the features you use, processing your requests, maintaining your account, and improving functionality as we see fit to better serve our users.
Personalisation: Customising your experience within the Service based on your preferences, usage patterns, and subscription tier.
Authentication and security: Verifying your identity, managing sessions, detecting and preventing unauthorised access, fraud, and abuse.
Communications: Sending transactional communications such as email verification, account notifications, and alerts based on your notification preferences. We may also send you service-related announcements, updates, and administrative messages.
Analytics and improvement: Analysing usage patterns, trends, and aggregate data to identify issues, improve performance, develop new features, and enhance the overall user experience.
Customer support: Responding to your enquiries, troubleshooting issues, and providing technical assistance.
Legal and compliance: Enforcing our Terms of Service, complying with applicable laws and regulations, responding to legal processes, and protecting our rights and the rights of our users.
Marketing: With your consent where required, sending promotional communications about new features, products, or services. You can opt out of marketing communications at any time.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following circumstances:

Service providers: We use third-party service providers to help us operate and deliver the Service. These providers may include, but are not limited to, providers of cloud hosting and infrastructure, market data and financial information, AI-powered analysis and language processing, email delivery and communication services, payment processing, analytics and monitoring, and customer support tools. These providers may receive or process information as necessary to perform their functions on our behalf and are contractually obligated to handle your data in accordance with applicable data protection requirements and this Privacy Policy.
Aggregated and anonymised data: We may share aggregated, de-identified, or anonymised data that cannot reasonably be used to identify you. This data may be used for industry analysis, benchmarking, research, or other purposes.
Legal requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
Business transfers: In the event of a merger, acquisition, reorganisation, bankruptcy, sale of assets, or other business transaction, your information may be transferred to the successor entity or acquiring party. We will notify you of any such transfer and any choices you may have regarding your information.
With your consent: We may share your information with third parties when you have given us your explicit consent to do so.
Professional advisers: We may share information with our lawyers, auditors, accountants, and other professional advisers as necessary for them to provide their services to us.

5. Data Storage and Security

We take the security of your data seriously and implement appropriate technical and organisational measures to protect it:

Infrastructure: Your data is stored on secured servers with appropriate access controls, encryption, and monitoring.
Encryption: Data is encrypted in transit using TLS/HTTPS and at rest where supported by our infrastructure providers.
Passwords: Stored using industry-standard one-way hashing algorithms. We cannot read or recover your password.
Access controls: Access to personal data is restricted to authorised personnel who need it to perform their job functions. Our systems enforce authentication and authorisation controls.
Secrets management: API keys, credentials, and other secrets are stored securely and are never included in source code, logs, or error messages.
Sessions: Access tokens expire periodically and must be refreshed by logging in again.
Monitoring: We monitor our systems for security threats, unauthorised access attempts, and anomalies.

No method of electronic storage or transmission is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You acknowledge and accept the inherent risks of providing information online.

6. Data Retention

We retain your information for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law:

Account data: Retained for as long as your account is active. Upon account deletion, your personal data is permanently removed within thirty (30) days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms).
Investment research data: Screening criteria, watchlist entries, portfolio data, and other research content are retained for the life of your account.
Log and usage data: Server logs and usage data are retained for up to ninety (90) days for security, debugging, and performance monitoring purposes, and are then automatically purged or anonymised.
Support communications: Retained for the life of your account for reference purposes and to improve our support services.
Marketing signup data: Retained until you unsubscribe or request deletion.
Backup data: Backup copies of data may be retained for a reasonable period in accordance with our backup and disaster recovery procedures.

7. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information. These may include:

Access: The right to request a copy of the personal data we hold about you.
Correction: The right to request correction of inaccurate or incomplete personal data.
Deletion: The right to request deletion of your account and associated personal data, subject to any legal obligations requiring us to retain certain information.
Data portability: The right to request a copy of your data in a structured, commonly used, machine-readable format.
Restriction of processing: The right to request that we restrict the processing of your personal data in certain circumstances.
Objection: The right to object to certain types of data processing, including processing for direct marketing purposes.
Withdrawal of consent: Where we process your data based on your consent, the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Complaint: The right to lodge a complaint with a supervisory authority in your jurisdiction if you believe your data protection rights have been violated.

To exercise any of these rights, contact us at privacy@strikezoneinvesting.ai or through the Support page within the application. We will respond to your request within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing your request.

8. Cookies, Local Storage, and Tracking

The Service uses browser local storage (not cookies) to store:

Authentication token: Your session token, used to keep you logged in.
Theme preference: Your light/dark mode setting.

We do not use tracking cookies, third-party advertising cookies, or cross-site tracking technologies. We do not participate in ad networks or sell data to advertisers.

We may use analytics tools to understand how the Service is used. Where such tools are used, they collect anonymised or aggregated data that cannot be used to identify individual users.

9. Children’s Privacy

The Service is not intended for use by anyone under the age of 18 (or the age of majority in their jurisdiction, whichever is greater). We do not knowingly collect personal information from children. If we learn that we have inadvertently collected data from a child, we will take steps to delete it promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. International Data Transfers

Your data may be processed and stored in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction. By using the Service, you consent to the transfer of your data to these countries. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy and applicable law, regardless of where it is processed.

Where required by applicable law, we rely on appropriate legal mechanisms for international data transfers, such as standard contractual clauses, adequacy decisions, or other approved transfer mechanisms.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

The right to know what personal information we collect, use, disclose, and sell.
The right to request deletion of your personal information.
The right to opt out of the sale or sharing of your personal information. We do not sell or share your personal information as defined by the CCPA/CPRA.
The right to non-discrimination for exercising your privacy rights.

To exercise your California privacy rights, contact us at privacy@strikezoneinvesting.ai.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) and equivalent legislation. Our legal bases for processing your personal data include:

Performance of a contract: Processing necessary to provide the Service to you under our Terms of Service.
Legitimate interests: Processing necessary for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security, where such interests are not overridden by your rights and freedoms.
Consent: Processing based on your consent, which you may withdraw at any time.
Legal obligation: Processing necessary to comply with applicable laws and regulations.

You may exercise your GDPR rights by contacting us at privacy@strikezoneinvesting.ai. You also have the right to lodge a complaint with your local data protection authority.

13. Do Not Track

Some browsers offer a “Do Not Track” (DNT) signal. As there is currently no industry standard for recognising or responding to DNT signals, the Service does not currently respond to them. However, as noted above, we do not use cross-site tracking technologies or third-party advertising cookies.

14. Third-Party Links and Services

The Service may contain links to third-party websites, services, or resources that are not operated by us. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you interact with.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make changes:

We will update the version number and effective date at the top of this document.
For material changes, we will notify you via the Service and may require re-acceptance before you can continue using protected features.
Your continued use of the Service after changes to this Privacy Policy constitutes acceptance of the updated policy.
If you do not agree to the updated Privacy Policy, you must stop using the Service and delete your account.

We encourage you to review this Privacy Policy periodically.

16. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@strikezoneinvesting.ai
In-app: Through the Support page within the application