Legal

Privacy Policy

What we collect, why we collect it, and what we never do with your data — in plain language.

Last updated: August 5, 2026

Information we collect

When you sign in with Google OAuth we receive your name, email address, and avatar, which we store so you are recognized on your next visit. We also store the data you create in the app: watchlists, alert rules, saved chart layouts, and billing status.

We collect limited usage data (which symbols you view, request counts) to keep the service healthy and to rate-limit abusive traffic. Connection metadata such as IP address is used only for rate limiting and abuse prevention and is not retained long-term.

How we use your data

  • To authenticate you and restore your watchlists, layouts, and alerts.
  • To run the alert engine that evaluates your saved rules against incoming ticks.
  • To bill you through Lemon Squeezy and to send you transaction-related emails (receipts, renewal reminders).
  • To measure product usage so we can fix bugs and improve the product.

What we never do

  • We do not sell your personal data.
  • We do not show you targeted ads.
  • We do not trade on your behalf or share your watchlists or alert activity with third parties.
  • We do not store your passwords — you authenticate through Google OAuth only.

Data sharing

Your data is processed by our infrastructure provider hosting the backend and database, and by Lemon Squeezy for payment processing. Google receives only what is required by the OAuth flow. We do not otherwise disclose your data except where required by law.

Data retention and deletion

We keep your account data for as long as your account is active. You can delete your account at any time, which removes your watchlists, alerts, layouts, and profile information. Billing records are retained only as long as required for tax and accounting purposes.

To delete your account, contact support at the address on the contact page, or use the request deletion option in your account page.

Your rights

Depending on your jurisdiction you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us and we will act on your request.

Children

FinPull is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has provided us personal information, contact us and we will delete it.

Contact

Questions about this policy should be sent to support@finpull.app. We may update this policy and will post the revised version with a new effective date here.

Questions about this document? Email support@finpull.app.