← Back

Privacy Policy

Effective date: August 2, 2026 · Last updated: August 28, 2026

1. What We Collect

Account data: email address, display name, password (bcrypt hash only), subscription tier.
Billing data: processed by Stripe; we store only your Stripe customer ID — never card numbers.
Cloud-sync data (Pro, opt-in): UI preferences, favorites, alerts, and journal entries you explicitly push. API keys and secrets are excluded by design and our server rejects them.
Operational logs: standard server logs (IP, user agent, timestamps) retained for 90 days.
Security activity log: sign-in, sign-out, failed sign-in, email verification and password-change events, each with the time, a truncated network prefix (e.g. 203.0.113.0/24, not your full IP) and a coarse device family (e.g. “Chrome on macOS”, not your full browser fingerprint). Kept for 90 days and then deleted automatically. You can view your own record at any time under Settings → Profile → Account Activity.
Connection status: whether your brokerage or market-data credentials were last accepted or refused, when, and which method you connected your brokerage with — an API key pair or Alpaca’s authorisation screen. That is the whole record: never the key itself, never which account it belongs to, and never what the request asked for. It exists so that a connection which has stopped working can be told apart from one that was never set up. Superseded on each change.
Section usage: a daily count of how many times you opened each section of the app (for example “GEX” or “Screener”) and roughly how long it was on screen. This is a first-party aggregate stored in our own database — there is no third-party analytics service, and no record of individual actions or their order. Section names only: no symbols, strikes, expiries, orders or position values are ever recorded. Kept for 12 months. You can turn this off under Settings → Profile → Account Activity.

2. What We Deliberately Do NOT Collect

Your brokerage, market-data, and AI-provider API keys. They are stored only in your browser's local storage and relayed per-request to the respective provider; they are never logged or persisted on our servers.
Your trades, positions, watchlists, or portfolio values (unless you opt into cloud sync of settings).
Advertising identifiers, third-party trackers, or third-party analytics services. The section-usage counts described above are first-party only: they stay in our own database and are never shared or sold.
Which symbols you look up, or any content of what you view — only which sections of the app you open.

3. How We Use Data

To authenticate you and operate your subscription.
To provide optional cloud sync you explicitly initiate.
To send transactional email (verification, password reset, billing). No marketing email without consent.

4. Sharing

We do not sell personal data. We share data only with: Stripe (payments), our email/SMTP provider (transactional email), and as required by law.

5. Your Choices

Export or delete cloud-synced settings at any time from Settings → Sync & Backup.
Clear all locally stored data (including API keys) via your browser's site-data settings.
Download your data (GDPR Art. 20) at any time from Settings → Profile → Your Data. You get a JSON file containing your profile, saved settings, sign-in history and usage records.
Delete your account (GDPR Art. 17) yourself, immediately, from Settings → Profile → Your Data. This erases your profile, settings, sign-in history and usage records outright — it is not a hidden “deleted” flag — and cancels any active subscription first. It cannot be undone, so export your data beforehand if you want it. Records of past payments remain with our payment processor (Stripe) because tax and accounting law requires us to retain them; they are no longer linked to a GreeksView account.

6. Security

Passwords are hashed with bcrypt. Sessions use signed, httpOnly cookies. Traffic is encrypted in transit. No method is 100% secure; notify us immediately at contact@greeksview.com if you suspect unauthorized access.

7. Contact

Fathomline Analytics LLC · 4601 E. Douglas Ave., Ste 150, Wichita, KS 67218 · contact@greeksview.com