Privacy Notice
Last updated: 5 June 2026
The Quiet Investor is a research and analytics platform. This notice explains what personal data we hold, why we hold it, and the controls you have over it. It is designed to be compatible with GDPR (right to erasure, right to data portability) and CCPA-style rights. The Quiet Investor makes no formal certification commitment in this version.
What we store
- Account identity: email address, optional Google identity, display name.
- Personalization: portfolios, positions, watchlists, alerts, saved screens, AI-artefact feedback, per-company valuation-assumption overrides, chat-session history, and referral records.
- Subscription state and Stripe customer/subscription identifiers (billing is processed by Stripe; we do not store card data).
- Security-relevant audit events (sign-in, subscription changes, admin actions, referral actions).
Data export (portability)
You can request a machine-readable export of your personalization data at any time from your account settings. Exports cover portfolios, positions, watchlists, alerts, saved screens, AI-artefact feedback, valuation-assumption overrides, and chat-session history. We aim to fulfil export requests within 24 hours.
Account deletion (erasure)
You can delete your account from your account settings. On confirmed deletion we immediately revoke your active sessions and, within 30 days, purge or irreversibly anonymize your personally identifiable data and personalization data. Security-relevant audit events may be retained in pseudonymized form for the period required by applicable law, then deleted.
Audit retention
We keep an audit trail of security-relevant events for incident review. After account deletion these records are retained only in pseudonymized form (your identity is replaced with a non-reversible pseudonym) for the legally required period.
Third-party processors
- Lemon Squeezy — subscription billing and referral discounts. Lemon Squeezy is the merchant of record and handles payment details; we never receive your card number.
- Google (Gmail SMTP) — delivery of transactional email (address verification, password reset, alert notifications, billing reminders).
- Groq — AI artefact generation and the educational chatbot. Anthropic (Claude) is used only as a fallback when Groq is unavailable. Your prompts are not used to train either provider's models.
- Market and fundamental data providers — SEC EDGAR, Yahoo Finance, and Financial Modeling Prep for supplementary datasets. These receive company identifiers only, never your personal data.
Contact
For privacy requests beyond the self-service tools above, contact privacy@alphascope.app.
The Quiet Investor provides informational analysis only and does not provide personalized investment advice. See our investment disclosures.