Privacy Policy

This policy describes how EquitySonar ("we") handles personal information in connection with EquitySonar. Questions or requests can be sent to [email protected].

We collect only what the Service needs:

• Account details when you sign in with Google: your Google account identifier, email address, display name, and profile picture URL.
• Content you create: tickers you add to your watchlist and positions you enter in the portfolio feature.
• Technical data: server logs that can include your IP address, request paths, and timestamps, kept for security and operations.

We do not ask for your bank, brokerage, or government identification details, and we do not collect them.

Session cookie. When you sign in we set one cookie that keeps you signed in. It is marked HttpOnly (not readable by page scripts), Secure in production, and SameSite=Lax. It expires after a fixed period and is deleted when you sign out. It is strictly necessary for sign-in, so we do not use a consent banner for it.

Web analytics. We use Umami Cloud to count page views and understand which pages are useful. Umami does not use cookies and does not track you across other websites. We do not sell or share analytics data for advertising.

• to sign you in and keep your watchlist and portfolio available to you;
• to secure the Service and detect abuse;
• to operate, maintain, and improve the Service;
• to respond to your questions and requests.

We do not sell personal information. We share it only with service providers that help us run the Service, and only as needed for that purpose:

• Google, which authenticates your sign-in.
• OVHcloud, which hosts the application, database, and backups.
• Cloudflare, which sits in front of the site for DNS, traffic protection, and TLS. It processes connection data such as IP addresses, and this may occur outside Canada.
• Umami Cloud, for aggregated, cookieless page-view statistics.

We may disclose information if required by law or to protect the rights and safety of users or others.

Our application server and database run on a virtual private server hosted by OVHcloud in Beauharnois, Québec, Canada. Cloudflare, Google, and Umami process data according to their own infrastructure, which may be located outside Canada.

We keep account details and the content you create for as long as your account exists. When you ask us to delete your account, we delete that information from the live database. Copies in backups are overwritten as the backup cycle rotates.

Server logs are kept only for as long as needed for security and operations.

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate information;
• request deletion of your account and information;
• receive a copy of your information in a portable format;
• withdraw consent where we rely on it.

To exercise any of these rights, email [email protected] from the address linked to your account. We may need to verify your identity before responding.

We use HTTPS for all traffic, keep the session cookie inaccessible to page scripts, restrict access to the server and database, and keep API keys out of source code. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this policy. The "Last updated" date at the top shows the most recent revision. For material changes, we will give notice on the Service before the change takes effect.

If you have a concern about how we handle your information, contact us first at [email protected]. You may also complain to your provincial or federal privacy regulator, such as the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.