Privacy Policy

Data Collection & Storage

SavvyStocks stores the following data you provide:

• Portfolio holdings (ticker symbols, share counts, cost basis, notes)
• Watchlist entries
• Transaction records (buy, sell, dividend)
• AI chat conversation history
• Authentication credentials (hashed, never stored in plaintext), including optional two-factor authentication and passkey data
• Your email address — used to sign you in via secure magic link and to send account alerts and reports
• Your mobile phone number — only if you enable SMS alerts or SMS two-factor authentication
• Limited technical data such as IP address — used for security, rate limiting, and fraud prevention

All data is stored in a secured PostgreSQL database and is only accessible through authenticated sessions.

Brokerage Account Connections

SavvyStocks lets you securely link a brokerage or investment account to automatically import your holdings and transaction history. These connections are handled by trusted third-party providers — Plaid and SnapTrade.

• When you choose to link an account, you enter your brokerage login credentials directly into Plaid's or SnapTrade's own secure interface. SavvyStocks never sees, receives, or stores your brokerage username, password, or security answers.
• After you authorize the connection, we receive and store the investment data needed to display and analyze your portfolio — such as the institution name, account type, a masked account number, holdings (tickers, share counts, cost basis), balances, and transaction history.
• This data is linked to your account and used solely to power the portfolio tracking, analysis, and reporting features of the app. It is never sold or used for advertising.

• You can disconnect a linked account at any time from Account > Brokerage Connections. Deleting a connection removes its imported data, and deleting your account removes all of it.
• Your use of Plaid is governed by Plaid's End User Privacy Policy. Your use of SnapTrade is governed by SnapTrade's Privacy Policy.

Market Data

Real-time stock quotes, dividend information, earnings data, and price history are retrieved from third-party market data providers (primarily Twelve Data). When you look up a stock or view your portfolio, your requested ticker symbols are sent to these providers to fetch current pricing.

SavvyStocks does not sell or share your portfolio data or search queries with any party other than what is required to fetch market data.

AI-Powered Features & Data Processing

SavvyStocks uses AI-powered features provided by OpenAI (a third-party service). The following AI features process your data:

• Hootie Chat Assistant: Your chat messages, conversation history, and portfolio context (holdings, allocations, performance data) are sent to generate personalized responses.
• Daily Portfolio Brief: A summary of your portfolio holdings, sector allocations, and recent performance is sent to generate your daily AI analysis.
• AI Portfolio Services: Portfolio data relevant to your selected analysis prompt (e.g., risk assessment, tax-loss harvesting candidates) is sent for processing.
• Smart Insights: Holdings data is analyzed to generate automated alerts (concentration risk, earnings proximity, etc.).

• SavvyStocks accesses OpenAI via their API. Per OpenAI's API Data Usage Policy, data submitted through the API is not used to train or improve OpenAI's models.
• OpenAI may retain API inputs and outputs for up to 30 days for abuse and misuse monitoring, after which it is deleted, unless required by law.
• For full details, see OpenAI's Privacy Policy.

• AI chat conversation history is stored in the SavvyStocks database and is accessible only to your authenticated account.
• AI-generated portfolio briefs are cached temporarily to improve performance and reduce redundant API calls.
• You can delete any chat conversation at any time from the chat panel.

• You can disable all AI features at any time through Account > Preferences. When disabled, no data is sent to OpenAI.
• AI features are only available to Pro-tier subscribers. Free-tier users do not have data processed by OpenAI.
• Do not share sensitive personal information (Social Security numbers, bank account details, passwords, etc.) in AI chat conversations.

SMS / Text Messaging Program

SavvyStocks offers an optional SMS notification program ("SavvyStocks SMS Alerts") that delivers user-configured account alerts — including price alerts, dividend confirmations, ex-dividend reminders, earnings reminders, and system notices — to a mobile phone number you provide.

• You provide your mobile number directly to SavvyStocks by signing in to your account, navigating to Account > Message Center > Notification Preferences, entering your number, and explicitly checking the SMS consent box before saving.
• SavvyStocks does not obtain mobile numbers from third parties, purchased lists, data brokers, affiliates, or offline channels. Mobile numbers are collected only through this in-app opt-in flow.
• At the moment you opt in, our server records the timestamp, the IP address used to consent, and the exact disclosure text shown to you, so the consent is auditable.

• Your mobile number is shared only with our SMS delivery vendor (Twilio) for the sole purpose of routing the SMS message you requested. Twilio is contractually prohibited from using the data for its own marketing.
• Your mobile number is never sold, rented, leased, or otherwise transferred to any third party for advertising, lead generation, or promotional purposes.
• Your SMS opt-in status, consent timestamp, and consent text are stored solely to demonstrate compliance with applicable carrier and CTIA requirements and are never shared for marketing.

• Message frequency varies and depends entirely on the alert thresholds you configure (for example, the number of price alerts you set or the dividends/earnings tied to your holdings).
• Message and data rates may apply. SavvyStocks does not charge for SMS, but your wireless carrier's standard rates apply.
• Reply STOP to any SavvyStocks SMS message to unsubscribe from all SMS at any time. Reply HELP for support contact information. You can also revoke consent at any time by unchecking the SMS consent box in Account > Message Center > Notification Preferences.
• For SMS support questions, contact support@savvystocks.ai.

For full SMS program terms, see the SMS Program Terms section of our Terms of Service.

Push & Email Notifications

SavvyStocks can notify you about account and market events (such as price alerts, dividend and earnings reminders, and system notices) through the channels you choose to enable:

• Email: account alerts, reports, and secure sign-in (magic link) emails are delivered through our email provider, SendGrid. Your email address is shared with SendGrid solely to deliver these messages and is never used for third-party marketing.
• Push notifications: if you enable browser or device notifications, we store a push subscription token for your device so we can deliver the alerts you turned on. You can revoke this at any time in your browser or device settings, or by disabling notifications in the app.
• SMS / text messages: delivered via Twilio only if you opt in — see the SMS / Text Messaging Program section above for full details.

Cookies & Local Storage

SavvyStocks uses the following browser storage:

• Session cookie — Maintains your login session (httpOnly, secure, expires after 7 days)
• Sidebar state cookie — Remembers if the sidebar is open or collapsed
• localStorage — Stores UI preferences (theme, column widths, watchlist list names)

No tracking cookies, analytics, or advertising cookies are used.

Security Measures

• Password-based authentication with optional TOTP two-factor authentication
• HTTPS enforced via HSTS headers
• Content Security Policy (CSP) headers to prevent XSS attacks
• Rate limiting on login attempts and API requests
• HttpOnly, Secure, SameSite session cookies
• Input validation on all API endpoints

Payments & Subscriptions

SavvyStocks offers Free and Pro subscription tiers. All payment processing is handled by trusted third parties — SavvyStocks never receives or stores your full payment card number.

• On the web, subscription payments are processed by Stripe. Your card details are entered directly with Stripe; SavvyStocks stores only your Stripe customer and subscription identifiers and your current plan status.
• On iOS, subscriptions are processed through Apple In-App Purchase, with entitlement status managed via RevenueCat. Apple processes the payment; SavvyStocks stores your subscription status and a purchase identifier linked to your account.
• Payment and subscription data is used solely to provide and manage your subscription. It is never sold or used for advertising.
• Your use of these services is governed by Stripe's Privacy Policy and RevenueCat's Privacy Policy.

Data Retention

SavvyStocks runs a single daily job that prunes user-attributed event and audit tables on the schedule below. The retention windows shown here are read directly from the server, so they always match what the backend actually does:

• Hidden Gem engagement events — kept for 6 months, then automatically deleted. Per-user clicks on Hidden Gem cards (copy, share, view) used to power the admin engagement panel. Older rows have no operational value.
• AI usage logs — kept for 1 year, then automatically deleted. Per-user OpenAI request token counts used to enforce daily caps and surface monthly cost transparently. No prompt or response content is stored.
• In-app notifications — kept for 3 months, then automatically deleted. Price alerts, dividend confirmations, earnings reminders, and system notices delivered to your inbox. Read or unread, all are pruned on the same schedule.
• Magic-link login tokens — kept for 7 days, then automatically deleted. One-time email login tokens. Consumed and expired tokens are kept briefly so a security incident can be audited, then deleted.
• System scan history — kept for 1 year, then automatically deleted. Background platform health and security scan results, retained so the team can investigate past incidents.
• Scheduled job run log — kept for 30 days, then automatically deleted. Per-tick success/failure record for every background job (price-alerts, weekly reports, scanners, canary). Powers the admin Scheduled Jobs panel and reliability metrics.
• Alert canary run log — kept for 3 months, then automatically deleted. Daily synthetic-event runs that exercise every alert type × channel against the demo user, used to detect silent per-channel regressions. No real user content stored.
• External API call log — kept for 30 days, then automatically deleted. Per-call forensic record of every external API request (TD, Stooq, Coingecko, OpenAI, SendGrid, Twilio, Stripe, Plaid). Used by the API Diagnostics admin tab and operator alerting. Pruned after 30 days.
• Dividend API snapshot log — kept for 3 months, then automatically deleted. Per-symbol verbatim vendor dividend values (reportedYield, reportedRate, ex-date, last payment) captured on every fetch. Used by the day-over-day delta canary to detect long-tail dividend drift. No user content stored.
• Dividend delta canary run log — kept for 3 months, then automatically deleted. Daily delta-canary runs that compare today's dividend snapshot to the prior one for every held symbol. Used to detect silent vendor-side dividend regressions. No user content stored.
• User-reported dividend issues — kept for 1 year, then automatically deleted. Reports filed by users via the 'Report incorrect dividend' link. Resolved/dismissed reports are kept for one year to support pattern analysis, then deleted.
• User-facing SLO log — kept for 3 months, then automatically deleted. Per-request record of whether each critical user-facing endpoint (/api/quotes/*, etc.) delivered usable data. The SLO truth table that survives a vendor swap unchanged. Pruned after 90 days.
• Login audit trail — kept for 1 year, then automatically deleted. Record of every successful sign-in (account, IP, device, method) shown in Admin → Security → Recent Logins. Kept for one year to answer 'who accessed this account and when', then deleted.
• Last-known-good fallback cache — kept for 7 days, then automatically deleted. Most recent successful payload per (scope, key) used as the durable safety net when every live source fails. Pruned after 7 days — anything older is too stale to be useful even as a last resort.

Records you create directly (holdings, watchlists, transactions, AI chat history, account settings) are kept until you delete them or close your account. See Data Deletion below.

Data Deletion

You can delete your data at any time:

• Individual holdings, watchlist items, and transactions can be deleted from their respective pages
• AI chat conversations can be deleted from the chat panel
• Delete your entire account from Account > Security > Delete my account. This permanently removes your profile, holdings, transactions, watchlists, alerts, preferences, passkeys, brokerage connections, and all associated data, and signs you out immediately.

All deletions are permanent and take effect immediately. We do not retain backups of deleted account data beyond 30 days, after which it is purged from all systems.