This Privacy Policy explains how [COMPANY_LEGAL_NAME] ("Investiply", "we", "us") collects, uses, and shares personal information when you use our website and services (the "Service"). By using the Service, you agree to this Policy.
If you enter your own third-party API key (for example, an AI provider key) it is stored locally in your browser and is not sent to or retained on our servers, except as needed to perform the request you initiate.
We do not sell your personal information. We share it only with service providers who process it on our behalf, and only as needed to run the Service:
| Provider | Purpose |
|---|---|
| Hosting/infrastructure (e.g., Render) | Running the app and storing data |
| Payment processors (e.g., Razorpay, crypto processors) | Processing payments |
| Email provider (e.g., Brevo) | Sending transactional and opt-in emails |
| AI provider (e.g., Anthropic) | Generating AI research when you use those features |
| Market-data providers | Supplying quotes, charts, and fundamentals |
We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and property of Investiply or others; and in connection with a merger, acquisition, or sale of assets, subject to this Policy.
We use a session cookie to keep you signed in and essential local storage to remember preferences (such as an API key you enter). We do not use cookies to sell your data. You can clear cookies/local storage in your browser, but the Service may not function properly without the session cookie.
We keep personal information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion as described below.
We use reasonable technical and organizational measures to protect your information, including password hashing and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent (for example, by turning off optional emails). To exercise these rights, contact [PRIVACY_EMAIL]. We will respond as required by applicable law, including the UAE Personal Data Protection Law and, where relevant, the GDPR/UK GDPR.
We operate from [COMPANY_LOCATION — e.g., the United Arab Emirates] and use service providers that may process data in other countries. Where required, we take steps to ensure appropriate safeguards for such transfers.
The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
The Service may link to third-party sites and services we do not control. Their privacy practices are governed by their own policies.
We may update this Policy from time to time. We will post the new version with an updated date and, for material changes, provide additional notice.
Privacy questions or requests: [PRIVACY_EMAIL] · [COMPANY_LEGAL_NAME], [COMPANY_ADDRESS].