TODO: This is a preliminary draft document that requires professional legal review before final publication.
Privacy Policy
1. Information We Collect
When you access or authenticate with Hetu, we collect minimal necessary data:
- Google Account Data: Your email address, display name, and unique user identifier provided via Google OAuth during sign-in.
- Watchlists: The stock ticker symbols you explicitly choose to save to your personal watchlist.
- Usage Counts: Daily counters tracking the number of analysis requests you trigger to prevent abuse and enforce service quotas.
2. Why We Collect This Information
We process your data strictly to:
- Authenticate your identity and manage active sessions.
- Persist your personal stock watchlist across devices.
- Enforce fair-use limits and prevent automated spam or cost overruns on analysis infrastructure.
3. Third-Party Service Providers (Data Processors)
We rely on trusted third-party cloud infrastructure to operate Hetu:
- Supabase: Provides managed PostgreSQL database hosting and authentication session management.
- Google: Facilitates Google OAuth 2.0 authentication and delivers public news feeds.
- Netlify: Provides application hosting, edge networking, and serverless compute.
- PostHog: Provides privacy-conscious product analytics. We collect high-level page views and application actions (such as viewing a ticker, opening price swing details, saving to watchlist, or triggering an analysis), mapped only to pseudonymous Supabase user IDs for logged-in sessions. We collect this telemetry to monitor product reliability and understand usage patterns. IP capture, session recording, and autocapture are strictly disabled, and we never transmit names, emails, or article summaries to PostHog. Telemetry is processed by PostHog Cloud on our behalf. You can opt out of analytics tracking at any time via the opt-out toggle in the footer.
4. How to Delete Your Account and Data
You maintain full sovereignty over your data. You may delete your account and all associated records at any time.
Account deletion permanently removes your profile record, saved watchlists, and usage logs from our database. To delete your account, you can use the account deletion button in the user profile menu or send a request to our API endpoint at DELETE /api/account while signed in.