Privacy Policy

To provide you with high-quality stock analysis services, we collect the following categories of personal information: **Account Information** • Collection: Name, email address, login password • Purpose: Create and manage your account, verify identity, provide personalized services **Service Usage Information** • Collection: Stock search records, generated AI analysis reports, service usage preferences • Purpose: Provide core analysis services, optimize user experience, improve algorithm performance **Payment Information** • Collection: Banking information (processed through secure third-party payment provider Stripe) • Purpose: Process your paid subscriptions and credit purchases, ensure transaction security **Technical Information** • Collection: IP address, browser type and version, device information, access logs • Purpose: Ensure system security, conduct data analysis, improve service stability **Cookie Information** • Collection: Login sessions, user preference settings, website usage statistics • Purpose: Maintain login status, remember user preferences, analyze website usage **Important Statement**: We will never actively collect your sensitive personal information such as race, religious beliefs, or health status.

We use your personal information based on legitimate business needs and legal basis, with specific uses including: **Core Service Provision** • Provide AI stock analysis reports and related functions • Maintain and improve our analysis algorithms and service quality • Handle your inquiries and provide technical support **Account Management** • Create and manage your user account • Verify your identity and account security • Process credit purchases and subscription service payments • Generate bills and provide transaction records **Communication** • Send important account notifications and policy updates • Respond to your inquiries and provide customer support • With your explicit consent, send product information and market research invitations • You can unsubscribe from marketing information at any time through account settings or email replies **Security Protection** • Detect, prevent and investigate potential fraudulent activities • Prevent malicious attacks and abuse • Ensure platform and user data security **Compliance Requirements** • Comply with applicable legal and regulatory requirements • Cooperate with legitimate investigations by regulatory authorities • Fulfill anti-money laundering and other compliance obligations

Protecting your privacy is our core principle. We promise: **Never to sell, rent, or disclose your personal data to third parties for commercial purposes**. We only share your information with trusted partners in the following necessary situations: **Technical Service Providers** • Vercel (Website Hosting Service) - Data storage location: EU/US (GDPR compliant) - Sharing purpose: Provide stable website access services - Security guarantee: Industry-leading data encryption and security measures • Stripe (Payment Processing Service) - Data storage location: EU/US (PCI DSS certified) - Sharing purpose: Securely process your payments and subscriptions - Security guarantee: Financial-grade security standards, full data encryption • Paddle (Payment Processing Service) - Data storage location: EU/US (PCI DSS certified) - Sharing purpose: Securely process your payments and subscriptions - Security guarantee: Financial-grade security standards, full data encryption • Google Analytics (Website Analytics Service) - Data storage location: EU/US (anonymized processing) - Sharing purpose: Analyze website usage to optimize user experience - Privacy protection: All data is anonymized and cannot identify individuals **Legal Disclosure Requirements** • When required by law or legal government requests • To protect our legitimate interests or other users' safety • With your explicit authorization We have signed strict data protection agreements with all third-party service providers to ensure your information security. A complete list of data processors is available upon request.

We only retain your personal information for necessary periods, with specific retention periods as follows: **Account Data** • Retention period: 7 years from account termination • Retention reason: Comply with Chinese tax law and financial regulations • Content included: Basic account information, transaction records, invoice data **Service Content Data** • Stock analysis reports: Automatically cleared 30 days after account deletion • Search history: Retained during account activity, immediately cleared upon account deletion • User preferences: Immediately cleared upon account deletion • Special note: You can request early deletion of this data at any time **System Log Data** • Access logs: Automatically truncated after 26 months retention • Security logs: Retention period determined by security needs, not exceeding 3 years • Anonymous statistical data: May be retained long-term for service improvement **Deleted Data Processing** • Data will be completely purged from all backup systems within 30 days of deletion • Except for legally required retained data (such as financial records) • Deletion process complies with international data security standards

Your data security is a core consideration in our technical architecture. We employ multi-layered security protection measures: **Data Encryption Protection** • Transmission encryption: All data transmission uses TLS 1.3 protocol encryption • Storage encryption: Static data uses AES-256 advanced encryption standard • End-to-end protection: Full encryption from your device to our servers **Access Control Management** • Principle of least privilege: Employees can only access work-necessary data • Multi-factor authentication: All database access requires multi-factor authentication • Access audit logging: Complete audit logs for all data access activities • Regular permission reviews: Quarterly evaluation and updating of access permissions **System Security Monitoring** • 24/7 security monitoring: Real-time detection of abnormal access and potential threats • Regular security assessments: Annual third-party security audits • Vulnerability scanning: Regular system vulnerability checks and repairs • Emergency response mechanism: Comprehensive security incident response procedures **Physical Security Protection** • Data centers: High-security level data centers meeting international standards • Environmental monitoring: 24/7 monitoring of temperature, humidity, power systems • Access control: Strict physical access control and visitor management systems

To enhance your user experience and ensure service security, we use cookies and similar technologies. We strictly follow transparency principles and detail the purpose of each type of cookie: **Essential Cookies (Cannot be disabled)** • Login session management: Maintain your login status, avoid repeated logins • Security protection: CSRF (Cross-Site Request Forgery) protection, ensure account security • Basic functionality: Save your language preferences and basic settings **Functional Cookies (Optional to disable)** • User preferences: Remember your personalization settings and choices • Shopping cart status: Save your credit purchases and subscription choices • Interface optimization: Remember your page layout and display preferences **Analytics Cookies (Optional to disable)** • Google Analytics: Anonymous website usage statistics to help us improve services • Performance monitoring: Detect page loading speeds and technical issues • User behavior analysis: Understand feature usage to optimize user experience **Cookie Management Options** • Browser settings: You can disable some or all cookies through browser settings • Analytics opt-out: You can choose to opt out of Google Analytics data collection • Functional impact: Disabling essential cookies may affect basic website functionality • Flexible control: You can modify cookie preferences at any time **Third-party Cookies Statement** We do not use advertising tracking cookies and will not sell your browsing data to advertisers.

As an AI Stock user, regardless of where you are in the world, you enjoy the following comprehensive data protection rights. We commit to adhering to the highest international standards including GDPR and CCPA: **Right to Access** • View the personal data we collect about you • Understand the source, purpose, and retention period of data • Obtain detailed information about data processing **Right to Rectification** • Correct inaccurate or incomplete personal information • Update outdated account information • Ensure data accuracy and timeliness **Right to Erasure ("Right to be Forgotten")** • Request deletion of personal data that is no longer needed • Delete related data after withdrawing consent • Request deletion when data processing is unlawful **Right to Restrict Processing** • Suspend data processing during dispute resolution • Limit the scope of specific data usage • Retain data but stop processing **Right to Data Portability** • Export your personal data in common formats • Transfer data to other service providers • Obtain structured, machine-readable data copies **Right to Object** • Object to data processing based on legitimate interests • Object to marketing emails and promotional information at any time • Object to data processing for analysis and profiling **Right to Non-Discrimination** • Exercising privacy rights will not affect service quality • Will not face unfair treatment for refusing certain data collection • Enjoy equal service conditions **Right Not to be Subject to Automated Decision-Making** • Request human review of important decisions made by AI algorithms • Understand the logic and impact of automated decision-making • Challenge algorithmic decision results **How to Exercise Your Rights** • Contact: support@aistock.tools • Identity verification: We will verify your identity to protect your privacy • Response time: Usually respond within 30 days • Free service: No fees for exercising these rights • Appeal channel: If dissatisfied with handling, you can appeal to data protection regulatory authorities

When we transfer your data outside China or the European Economic Area, we rely on Standard Contractual Clauses or an adequacy decision. A copy of relevant safeguards can be provided upon request.

AI Stock is not directed at children under thirteen. We do not knowingly collect personal data from children. Parents who believe their child has provided data may contact us for removal.

Our AI algorithms automatically generate stock analysis reports. You may request human review of any automated decision that significantly affects you by contacting our support team.

If you have any questions about this privacy policy or need to exercise your rights, please contact us at: support@aistock.tools

We will post any changes on this page and, for material updates, notify registered users by email at least seven days in advance. Continued use of the Service after the effective date constitutes acceptance.