Privacy Policy

1. Introduction

ClaritX ("we," "our," or "us") is committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), and other applicable data protection laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered stock analysis and portfolio simulation service.

2. Information We Collect

2.1 Information You Provide

• Account registration information (email address, name)
• Risk profile questionnaire responses (investment goals, risk tolerance preferences)
• Portfolio simulation preferences and saved configurations
• Stock search history and analysis requests
• Payment information (processed securely by third-party payment providers – we do not store card details)

2.2 Information Collected Automatically

• Device information (browser type, operating system, device identifiers)
• IP address and approximate geographic location
• Usage data (pages visited, features used, time spent, interaction patterns)
• Cookies and similar tracking technologies (see Section 6)

2.3 Legal Basis for Processing (GDPR)

We process your personal data based on: (a) your consent, (b) performance of our contract with you, (c) compliance with legal obligations, or (d) our legitimate interests in improving and securing our service.

3. How We Use Your Information

We use collected information for the following purposes:

• Service Provision: Delivering stock analysis, portfolio simulation tools, and personalized dashboard views
• Service Improvement: Analyzing usage patterns to enhance AI algorithms and user experience
• Transaction Processing: Managing subscriptions and processing payments
• Communication: Sending service updates, security alerts, and (with consent) marketing communications
• Security: Detecting and preventing fraud, unauthorized access, and abuse
• Legal Compliance: Meeting regulatory obligations and responding to lawful requests

4. AI Processing and Automated Analysis

Our service uses AI algorithms to analyze stocks and generate portfolio simulations. Important information about this processing:

• AI processes use publicly available market data, news, and financial metrics – not your personal investment accounts
• AI outputs are impersonal and educational – the same analysis is available to any user querying the same data
• We do not make automated decisions that produce legal effects concerning you
• You retain full control over any investment decisions you make

Under GDPR Article 22, you have the right to human review of significant automated decisions. Since our AI provides informational analysis only (not binding decisions), this primarily applies to account-related automated processes, for which you may contact us.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Service Providers: Third-party vendors assisting with hosting, analytics, payment processing, and customer support (under data processing agreements)
• Affiliate Partners: When you click broker referral links, the broker may receive your referral source (no personal data is shared without your action)
• Legal Requirements: When required by law, court order, or to protect our legal rights
• Business Transfers: In connection with mergers, acquisitions, or sale of assets (with notice to you)

6. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for the service to function (authentication, security)
• Analytics Cookies: To understand usage patterns and improve the service
• Preference Cookies: To remember your settings and preferences
• Affiliate Tracking: To attribute referrals to partner brokers (disclosed in our Terms)

Your Choices: You can manage cookies through your browser settings. EU users will see a cookie consent banner allowing granular control. Disabling non-essential cookies will not affect core functionality.

7. Data Security

We implement appropriate technical and organizational security measures, including encryption in transit and at rest, access controls, and regular security assessments. However, no electronic transmission or storage method is 100% secure. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by GDPR and applicable laws.

8. Your Privacy Rights

GDPR Rights (EU/EEA/UK Users)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, contact [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local Data Protection Authority.

CCPA/CPRA Rights (California Residents)

Under California law, you have the right to:

• Know: What personal information we collect and how it's used
• Delete: Request deletion of your personal information
• Correct: Request correction of inaccurate information
• Opt-Out: Opt out of sale or sharing of personal information (we do not sell data)
• Non-Discrimination: Equal service regardless of exercising privacy rights

We honor the Global Privacy Control (GPC) signal. To submit a request, contact [email protected] or use the "Do Not Sell or Share My Personal Information" link in our footer.

9. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy. Account data is retained until you request deletion. After account deletion, we may retain anonymized usage data for analytics. Legal and tax records are retained as required by applicable law.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. For transfers from the EU/EEA/UK, we rely on the EU-US Data Privacy Framework, Standard Contractual Clauses, or other lawful transfer mechanisms to ensure adequate protection of your data.

11. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a minor, we will delete it promptly. Parents who believe their child has provided information to us should contact [email protected].

12. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email or prominent website notice. The "Last updated" date at the top indicates the most recent revision. Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions about this Privacy Policy, to exercise your privacy rights, or to contact our Data Protection Officer, reach us at:

Email: [email protected]
Subject Line: Privacy Request – [Your Request Type]