1. Scope and controller
CybrCoast LLC, a Delaware limited liability company, controls personal data processed through TickerBuff and related services. This policy does not govern third-party sites or services that have their own privacy notices.
2. Information we collect
- Account data: email address, internal account identifiers, authentication timestamps, plan, and entitlement status.
- Workspace content: watchlists, saved tickers, layouts, filters, alerts, preferences, chart overlays, prompts, and saved analyses.
- Transaction data: subscription status, purchase amount, billing cadence, and payment-processor identifiers. We do not store full payment-card numbers.
- Usage and device data: pages and features used, clicks, request timing, approximate location derived from IP address, browser and device information, diagnostic events, security logs, and cookie or similar identifiers.
- Communications: messages, support requests, feedback, and email delivery or engagement events.
3. How we use information
We use personal data to authenticate users; provide and personalize workspaces; save settings and analyses; process subscriptions; deliver requested emails and alerts; meter usage; enforce entitlements; prevent fraud and abuse; diagnose outages; monitor data freshness and cost; improve models and product performance; provide support; and comply with legal and licensing obligations.
Where applicable law requires a legal basis, we rely on performance of our contract, our legitimate interests in operating and securing TickerBuff, consent where requested, and compliance with legal obligations.
4. AI prompts and analysis
When you use AI features, we process your prompt, relevant ticker context, chart state, authorized market data, model output, and technical trace information. This information may be sent to contracted AI infrastructure providers to generate the response. Do not include sensitive personal data or confidential information that you are not authorized to submit.
5. Cookies and similar technologies
We use essential storage for sessions, security, saved preferences, and service operation. With your analytics choice, Google Analytics 4 may measure page and ticker journeys, feature interactions, conversion steps, scroll and engagement milestones, device characteristics, client errors, and Core Web Vitals. We configure advertising storage and ad personalization as denied and do not send email addresses, AI prompt text, or raw licensed market data to Google Analytics.
You can accept or decline optional analytics from the preference notice and reopen that notice using “Analytics choices” in the footer. Declining optional analytics does not prevent sign-in, charts, or saved workspace features from working. Browser settings can also limit storage, but blocking essential storage may prevent account features from working.
6. How we disclose information
We disclose information only as reasonably necessary to service providers that support hosting, database and authentication, payment processing, transactional email, AI infrastructure, analytics and monitoring, customer support, and licensed market-data operations. These providers process information under contracts and may use it only to provide their services to us.
We may also disclose information to comply with law, protect users and the Service, investigate fraud or security incidents, enforce agreements, or complete a merger, financing, acquisition, reorganization, or sale of assets subject to appropriate safeguards.
We do not currently sell personal data for monetary consideration or process it for targeted advertising. If that changes, we will update this policy and provide legally required choices before beginning the practice.
7. Retention
We retain account and workspace data while your account is active and for a reasonable period afterward to support reactivation, resolve disputes, enforce agreements, and meet legal requirements. Security logs, AI traces, communications, and billing records are retained according to their operational, contractual, and legal purpose. We delete or de-identify information when it is no longer reasonably needed.
8. Security
We use administrative, technical, and organizational safeguards designed to protect personal data, including access controls, encryption in transit, scoped credentials, row-level database policies, rate limits, and security logging. No internet service is completely secure, and we cannot guarantee absolute security.
9. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a portable copy of personal data; opt out of certain processing; withdraw consent; or appeal a denied request. Delaware residents may exercise rights provided by the Delaware Personal Data Privacy Act.
Submit a request to legal@tickerbuff.com. We may verify your identity before acting. Authorized agents must provide proof of authority. You may appeal a decision by replying with “Privacy Appeal” in the subject line. You may also complain to your local data-protection authority or state attorney general.
10. Children and international use
TickerBuff is not directed to anyone under 18, and we do not knowingly collect personal data from children. Contact us if you believe a child has provided information.
We and our providers may process information in the United States and other countries where privacy laws differ. Where required, we use recognized transfer safeguards.
11. Changes and contact
We may update this policy as TickerBuff changes. We will post the new effective date and provide additional notice where required. Questions or requests can be sent to legal@tickerbuff.com.
CybrCoast LLC
Delaware, United States