Privacy Policy

Information we collect

We process account information such as your Clerk user identifier, email, optional name, and profile image; prompts, conversations, feedback, and generated research; usage, plan, and subscription state; and basic technical information such as timestamps, IP address, browser data, and security logs. Lemon Squeezy processes payment details as merchant of record; Kroam receives billing identifiers and subscription status, not full card numbers.

How we use information

We use information to authenticate you, provide and save research, enforce plan limits, process subscriptions, support users, secure and improve the service, measure reliability and feature use, prevent abuse, and meet legal obligations. We do not sell personal information.

Optional analytics

We count visits to public page types by default. If you opt in below, we also count research starts and outcomes (completed, failed, or stopped) and the research mode selected (Fast, Analyst, or Pro). This choice is voluntary and independent of your account or terms; declining it does not limit the service. We do not send prompts, answers, files, account IDs, conversation or share IDs, searches, or full page URLs to PostHog for these counts.

For this cookieless measurement, the browser sends the page type or fixed feature event, a timestamp, and the browser user agent to PostHog in the United States; the network request also conveys an IP address. PostHog uses these transient values to derive daily visitor and session identifiers, then removes the raw user agent and IP address before storing the event. The analytics client stores no persistent visitor identifier or analytics cookie. This is measurement, not a guarantee of anonymity. A browser-local preference records only your choice. Authentication and other service functions may use separate necessary storage.

PostHog receives these limited events for measurement on StockAlloy's behalf. Our page and feature counts can be incomplete when browser privacy signals, prior opt-outs, or blocking tools prevent analytics. You can change or withdraw your analytics choices below at any time; we do not send past feature use if you later opt in. To request access, correction or deletion of information where applicable, contact us below.

Service providers and disclosures

Information may be processed by infrastructure, authentication, payment, analytics, email, AI-model, and data-service providers acting for these purposes. Key categories include Cloudflare for hosting, Clerk for authentication, Lemon Squeezy for billing, and model providers used to generate answers. Information may also be disclosed when required by law, to protect users and the service, or as part of a business reorganization subject to appropriate safeguards.

AI prompts and public sources

Prompts and relevant conversation context may be sent to configured model providers to generate responses. Avoid submitting secrets or sensitive personal information. Kroam also retrieves public company filings, market information, and other linked sources to answer questions.

Retention and security

We retain account, conversation, billing, analytics, and security records for as long as needed to provide the service, measure use, resolve disputes, prevent abuse, and meet legal obligations. Retention periods may differ by record type. We use access controls, encryption in transit, hosted payment processing, and logging designed to protect information, but no system is completely secure.

Your choices and rights

You can update account details through Clerk, manage subscriptions through the billing portal, and request access, correction, export, or deletion where applicable. You may also object to or restrict certain processing and lodge a complaint with an appropriate data-protection authority. Some records may be retained when legally required or necessary for security and billing.

International processing and children

Providers may process information in countries other than yours, using appropriate legal safeguards where required. Kroam is intended for adults and is not directed to children under 18.

Contact and updates

StockAlloy is the service operator. Privacy questions, rights requests, or appeals of a privacy request decision can be sent to data@stockalloy.com (use “Privacy appeal” for an appeal). We may update this policy as the service changes; the date above identifies the current version.