Privacy Policy

What we collect, why, and how it's protected.

Last updated: 2026

    In short: We collect only what's needed to run your account (email, and either a Google sign-in or a
    hashed password) and any optional features you choose to use (like your Watchlist). We never sell your data,
    never store passwords in plain text, and you can request deletion of your account at any time.
  

What We Collect

Data	When	Why
Email address	Signup (Google or email/password)	Account identity, login
Password (hashed, never stored in plain text)	Email/password signup only	Login verification
Google account ID	Google sign-in only	Login verification via Google, not us
Watchlist symbols	When you add a company to your Watchlist	Show your saved companies when you return
Session cookie	After you log in	Keeps you logged in between page visits

Password Security

If you sign up with email and password, your password is run through Argon2 — a one-way hashing algorithm — before it's stored. We never see or store your actual password, and it cannot be reversed from what's stored in our database. If you sign in with Google, we never see or store a password at all — Google handles that entirely on their end.

Third-Party Services

Some features on this site send limited data to third-party services to work:

Google — if you use Google Sign-In, Google handles authentication; we only receive your email, name, and a Google account identifier.
Groq — powers the AI chatbot. Messages you send to the chatbot are sent to Groq's API to generate a response.
Tavily — powers the chatbot's web search feature. Your chatbot questions may be used to run a web search when relevant.

We don't control these third parties' own data practices — please avoid sending sensitive personal or financial account information through the chatbot.

What We Don't Do

We don't sell, rent, or trade your personal information to anyone.
We don't store your password in plain text, ever.
We don't share your email or mobile number with other users or third parties for marketing.

Your Rights

Right to be informed — this page exists so you know what's collected and why, before you sign up.
Right to rectification — if any information we hold about you is incorrect, contact us and we'll correct it.
Right to deletion — you can request your account and associated data be deleted at any time.

Data Security

The site is served entirely over HTTPS. Database access is restricted to the server itself. Passwords are hashed with Argon2. As with any online service, no method of storage or transmission is 100% secure, but we take reasonable, industry-standard measures to protect your information.

Data Retention

We keep your account information for as long as your account is active. If you request deletion, we will remove your account and associated personal data (email, password hash, Google ID, Watchlist) within a reasonable time.

Cookies

We use a single session cookie to keep you logged in. This cookie doesn't track you across other websites and isn't used for advertising.

Governing Law

This policy is intended to align with the Individual Privacy Act, 2075 (2018) and related Nepali law governing personal data collection and privacy.

Changes to This Policy

This policy may be updated as the site evolves. Continued use of the site after changes constitutes acceptance of the updated policy.

Questions about this policy, or want to request deletion of your data? This is an independent personal project — please reach out through the contact details on the About page.