Privacy Policy
GDPR-compliant privacy policy for StockAInalyst.
Last updated: February 2026
1. Data Controller
AUBREL, operating as StockAInalyst, is responsible for the processing of your personal data. Contact: support@stockainalyst.com.
2. Data Collected
We collect the following data:
- Account data: name, email address, hashed password, language preference.
- Documents: financial documents uploaded for analysis (stored encrypted on Cloudflare R2).
- Usage data: analyses generated, community votes, subscription history.
- Payment data: processed by Stripe. We do not store credit card numbers.
- Technical data: IP address, browser type, device information, access logs.
3. Purposes of Processing
- Contract execution: providing the Service, generating analyses, managing subscriptions.
- Consent: sending marketing communications (you can opt out at any time).
- Legitimate interest: improving the Service, analytics, fraud prevention.
- Legal obligation: accounting records, tax compliance.
4. Data Retention
- Account data: duration of registration + 30 days after deletion request.
- Documents: duration of registration (deleted upon account deletion).
- Payment records: 10 years (French legal requirement).
- Access logs: 12 months.
5. Third-Party Sharing
We share data with the following service providers only as necessary:
- Stripe: payment processing.
- Resend: transactional emails.
- Google Cloud Platform: hosting and computing.
- Cloudflare: DNS, CDN, and document storage (R2).
- We never sell your personal data to third parties.
6. International Transfers
Some of our service providers (Stripe, Cloudflare, Google) are based in the United States. These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Your Rights
Under GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data.
- Right of rectification: correct inaccurate data.
- Right of erasure: request deletion of your data.
- Right of portability: receive your data in a structured format.
- Right of objection: object to processing based on legitimate interest.
- Right of restriction: limit the processing of your data.
- To exercise these rights, contact us at support@stockainalyst.com.
8. Cookies
We use essential cookies only: session management, authentication, and language preferences. We do not use tracking cookies, third-party analytics, or advertising cookies. No cookie consent banner is required as we only use strictly necessary cookies.
9. Security
We implement appropriate technical measures to protect your data: HTTPS encryption for all communications, encrypted document storage on Cloudflare R2, hashed passwords, and access controls on our infrastructure.
10. Data Protection Officer
For any questions regarding data protection, contact us at support@stockainalyst.com.
11. Complaints
If you believe your data protection rights have been violated, you may file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.