Privacy Policy
What we collect
- Account data — your email address, optional name, and password hash, managed by our authentication provider (Supabase).
- Product data — positions and watchlist entries you create, plan and billing status, and product-usage events used to improve the service.
- Trial record — a one-way SHA-256 hash of your normalised email address, used only to allow one free-of-charge trial per person. We keep this hash after an account is deleted so a deleted account cannot start a second trial; it cannot be turned back into your email address.
- Billing data — your plan, billing status and Stripe customer reference. Card details are handled by Stripe and never reach our servers.
- Usage counters — counts of AI answers, council briefs and similar metered actions, used to apply your plan's limits.
- Technical data — standard server logs (IP address, user agent, timestamps) kept for security and abuse prevention.
What we use it for
- Operating your account and delivering the features you subscribe to.
- Sending transactional email: sign-in links, password resets, billing receipts, a small number of trial notices (a welcome, two days before the trial ends and on the last day) and, if you enable them, pick and IPO alerts.
- Aggregate, de-identified analytics to understand what to improve.
What we never do
- We do not sell or rent your personal data to anyone.
- We do not share your portfolio data with third parties, advertisers, or data brokers.
- We do not use your email for marketing you did not opt into.
Processors
We rely on a small set of infrastructure processors: Supabase (authentication and database), Vercel (hosting), Anthropic (AI processing of AI analyst questions) and Stripe (payments). Each processes data only as needed to provide its service.
Cookies
The service uses essential cookies only: your authentication session and your theme preference. There are no advertising or cross-site tracking cookies.
Retention and deletion
Account data is retained while your account is active, including while it is locked after a trial or subscription ends, so you can return or export it. Deleting your account removes your profile and portfolio data within 30 days, except the trial-record hash described above and records we must keep for legal or billing compliance.
Your rights
You can download your own data at any time from your account page, including while your account is locked. You may also request a copy of your data, correction, or deletion by emailing hello@invexa.uk. We respond within 30 days.
Contact
INVEXA · London, United Kingdom · hello@invexa.uk