Stoqx.ai (“Stoqx.ai”, “we”, “us”, or “our”) operates the Stoqx.ai website and application (together, the “Service”) — an AI-assisted stock research product offering market insights, charts, screeners, and alerts. We are based in India and this policy applies to everyone who uses the Service, wherever they are located.
We keep data collection to what we actually need to run the Service. We do not sell your personal information.
1. Information we collect
Information you give us
- Account information. When you create an account we collect your name, email address, and profile picture.
- Product content. Watchlists, saved screeners, alert settings, notes, and preferences you create inside the Service.
- Support and correspondence. Messages, feedback, and any attachments you send us.
Information from Google Sign-In
If you choose to sign in with Google, Google shares a limited set of profile information with us based on the permissions you grant. We request only the basic sign-in scopes (openid, email, and profile), which give us:
- your name and profile picture;
- your email address and whether it is verified; and
- your Google account identifier, which we use as a stable key to recognise you on return visits.
We use this data only to create and authenticate your Stoqx.ai account, display your identity within the app, and contact you about the Service. We do not request access to your Gmail, Google Drive, Google Calendar, contacts, or any other restricted or sensitive Google scope, and we cannot read that data. You can review and revoke Stoqx.ai access at any time from your Google Account permissions page.
Limited Use disclosure.Stoqx.ai's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not transfer it to third parties except as needed to provide or improve the Service, to comply with applicable law, or as part of a merger or acquisition, and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymised. We do not use Google user data to develop, improve, or train generalised or non-personalised AI or machine learning models.
Information we collect automatically
- Usage data. Pages and features viewed, actions taken, timestamps, and referring pages.
- Device and technical data. Browser and device type, operating system, approximate location inferred from IP address, and crash or error diagnostics.
- Cookies and similar technologies. We use strictly necessary cookies to keep you signed in and to secure the Service, and privacy-friendly analytics to understand aggregate usage. See Cookies below.
Information we do not collect
Stoqx.ai is a research and analysis product. We do not execute trades, and we do not ask for or store brokerage credentials, bank account numbers, or payment card details. Any holdings you record in the Service are entered manually by you and are treated as product content.
2. How we use your information
We use personal information to:
- create your account, authenticate you, and keep it secure;
- provide the Service — insights, charts, screeners, alerts, and personalised watchlists;
- send transactional messages such as alerts you configured, security notices, and important changes to the Service;
- respond to support requests and communicate with you about the Service;
- monitor performance, debug errors, prevent fraud and abuse, and protect the integrity of the Service;
- understand aggregate usage patterns so we can improve features; and
- comply with legal obligations and enforce our terms.
If we ever want to use your information for a materially different purpose, we will tell you first and, where the law requires it, ask for your consent.
3. AI-generated insights
Some Stoqx.ai features use AI models to summarise market data and generate signals. These features operate on market and company data, together with the query or ticker you are looking at. We do not use your Google account data, and we do not use your personal information, to train generalised or third-party AI models. AI output can be incomplete or wrong; see the Terms of Service for the disclaimers that apply.
4. Legal bases for processing
Where the EU or UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service you signed up for), legitimate interests (to secure, maintain, and improve the Service, and to prevent abuse), consent (for optional analytics and marketing communications, which you may withdraw at any time), and legal obligation (where we must retain or disclose data).
5. How we share information
We do not sell your personal information and we do not share it for cross-context behavioural advertising. We share information only in these situations:
- Service providers. Vendors who host our infrastructure, deliver email, provide analytics, and supply market data. They act on our instructions under contract and may use the data only to provide services to us.
- Legal and safety. Where we reasonably believe disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of Stoqx.ai, our users, or the public.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets. We will notify you before your information becomes subject to a different privacy policy.
- With your direction. When you ask us to share something, or otherwise consent.
6. Data retention
We keep personal information for as long as your account is active and for as long as we need it for the purposes described above. When you delete your account we delete or anonymise your personal information within 30 days, except where we must retain it to comply with a legal obligation, resolve a dispute, or enforce our agreements. Backups and logs are purged on a rolling schedule and are typically cleared within 90 days.
7. Security
We protect your data with encryption in transit (TLS) and at rest, access controls that limit who on our team can reach production data, and regular review of our systems and dependencies. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but if we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.
8. Your rights and choices
Depending on where you live, you may have the right to access a copy of your personal information, correct inaccurate data, delete your data, object to or restrict certain processing, withdraw consent, request portability, and not be discriminated against for exercising these rights. Residents of India have corresponding rights under the Digital Personal Data Protection Act, 2023, residents of the EEA and UK under the GDPR, and residents of California under the CCPA/CPRA.
You can exercise most of these directly in the app, or contact us at [email protected] and we will respond within the period required by applicable law. We may need to verify your identity before acting on a request. You can also:
- Unsubscribe from non-essential email using the link in any message;
- Turn off alerts in your notification settings;
- Revoke Google access from your Google Account permissions page; and
- Delete your account from your account settings, or by emailing us.
If you believe we have not resolved your concern, you may lodge a complaint with your local data protection authority.
9. Cookies
We use strictly necessary cookies for authentication, session management, and security — the Service will not work without them — and analytics cookies that help us count visits and understand which features get used. Most browsers let you block or delete cookies, though blocking necessary cookies will prevent you from signing in. We do not use advertising or cross-site tracking cookies.
10. International transfers
We operate from India and use service providers located in other countries, including the United States and the European Union. Where we transfer personal information across borders, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision, as applicable.
11. Children
The Service is not directed to children and is intended for users aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
12. Third-party services
The Service may link to or display data from third parties such as market data providers, exchanges, and news sources. Their handling of your information is governed by their own privacy policies, and we are not responsible for their practices.
13. Changes to this policy
We may update this policy as the Service evolves. When we do, we will revise the effective date above, and for material changes we will give you prominent notice in the app or by email before the change takes effect. Continuing to use the Service after a change means you accept the updated policy.
14. Contact us
Questions, requests, or complaints about this policy or your personal information can be sent to [email protected]. We aim to respond to every privacy enquiry within 30 days.