Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Authentication data (managed by our authentication provider)

User-Generated Content

When you use the Service, we store:

• Comments and replies you post
• Upvotes
• Watchlist selections
• Price alerts and notifications
• Price predictions
• Portfolio holdings (tickers, quantities, purchase prices)
• AI chat conversations (temporary, within session)
• XP (experience points) and activity data

Automatically Collected Data

• Search history (stored locally in your browser — not sent to our servers)
• Theme preference (stored locally in your browser)
• Analytics data via Google Analytics (see Section 4)

2. How We Use Your Data

• To provide and maintain the Service
• To authenticate your account and manage sessions
• To display your comments and activity in the community
• To calculate XP, leaderboard rankings, and user tiers
• To moderate comments using AI (comment text is processed for quality assessment)
• To manage your watchlist, price alerts, and portfolio
• To send you notifications about replies to your comments and triggered price alerts
• To provide AI-powered features (chat, analysis, digests)
• To understand how users interact with the Service (via analytics) so we can improve it

3. AI Processing

Palandock uses AI to provide several features:

• News analysis: Publicly available news articles are processed by AI to generate summaries and sentiment analysis. No personal user data is included in these requests.
• Comment moderation: When you submit a comment, its text is processed by AI for quality assessment. Your email or identity is not included — only the comment text and the stock ticker.
• AI Chat: When you use the AI chat feature, your questions along with relevant stock data are processed. Conversations are not permanently stored and are subject to daily usage limits.
• Market analysis: AI features like "Why is it moving?" and Daily Digest process publicly available market data — no personal data is used.

4. Cookies, Analytics & Local Storage

Essential Cookies

We use essential cookies for authentication to maintain your login session. These are strictly necessary for the Service to function and do not require consent.

Analytics (Google Analytics)

We use Google Analytics to understand how visitors interact with the Service. Google Analytics collects information such as pages visited, time spent on pages, and general geographic location (country/city level). This data is anonymized and aggregated — we cannot identify individual users from analytics data.

Google Analytics uses cookies to collect this information. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on, or by rejecting analytics cookies when prompted.

Local Storage

• Theme preference: Your dark/light mode choice (never sent to our servers)
• Recent searches: Your search history for convenience (never sent to our servers)
• Cookie consent: Your cookie preference choice

We do not use advertising cookies or third-party tracking cookies beyond Google Analytics.

5. Third-Party Services

We use the following categories of third-party services:

Each third-party service processes data according to their own privacy policies. We only share the minimum data necessary for each service to function.

6. Data Retention

Your account data is retained as long as your account is active. Comments and activity data are retained unless you delete them. AI chat conversations are temporary and not permanently stored. If you delete your account, all associated data (profile, comments, votes, watchlist, predictions, alerts, notifications, portfolio) will be permanently removed within 30 days.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data (e.g., update your display name)
• Delete your account and all associated data
• Export your data upon request
• Object to processing of your data for analytics purposes
• Withdraw consent at any time by deleting your account or adjusting cookie preferences

These rights apply under GDPR (EU/EEA), UK GDPR, and similar data protection regulations. To exercise any of these rights, contact us at privacy@palandock.com.

8. Data Security

We implement appropriate security measures to protect your data, including encrypted connections (HTTPS), secure authentication with JWT tokens, and access controls on our database. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your data may be processed in countries outside your own, including the United States (where our hosting and AI providers operate). We ensure appropriate safeguards are in place for any international transfers of personal data.

10. Children's Privacy

Palandock is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email or a notice on the Service. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of the Service after changes constitutes acceptance.

12. Contact

For privacy-related inquiries, contact us at privacy@palandock.com.