Privacy Policy

Last updated: April 7, 2026

1. Who We Are

BullScans ("we", "our", "us") is a real-time stock momentum scanning service. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website and application at bullscans.netlify.app.

2. Data We Collect

We collect the following data when you create an account and use our service:

• Account data: email address and encrypted password (managed by Supabase Auth)
• Usage data: watchlist tickers, scan history snapshots, subscription plan
• Payment data: billing information processed by Stripe — we never store card details directly
• Technical data: browser type, IP address, access logs (standard server logs)

3. How We Use Your Data

• To provide and maintain the BullScans service
• To process payments and manage your subscription
• To save your watchlist and scan history across sessions
• To send transactional emails (account confirmation, billing receipts)
• To improve our service based on usage patterns

4. Data Storage and Security

Your data is stored in the European Union on Supabase (PostgreSQL) infrastructure. We use industry-standard encryption for data in transit (HTTPS/TLS) and at rest. Authentication tokens are stored securely in your browser's local storage.

5. Third-Party Services

We use the following third-party services that may process your data:

• Supabase — database and authentication (supabase.com)
• Stripe — payment processing (stripe.com)
• Vercel — hosting and serverless functions (vercel.com)
• Massive — market data API; only ticker symbols are transmitted, no personal data (massive.com)

6. Your Rights

Regardless of where you are located, you may at any time:

• Request a copy of your personal data
• Request correction of inaccurate data
• Request deletion of your account and all associated data

EU / EEA residents (GDPR)

In addition to the above, you have the right to data portability, the right to object to processing based on legitimate interests, and the right to lodge a complaint with your local supervisory authority.

California residents (CCPA)

California residents have the right to know what personal information we collect and how it is used, the right to delete personal information, and the right to non-discrimination for exercising these rights. We do not sell personal information to third parties.

All other regions

We apply the same data minimisation and deletion standards to all users. Contact us at any time to exercise your rights.

To exercise any of these rights, contact us at privacy@bullscans.com.

7. Data Retention

We retain your account data for as long as your account is active. Scan history is retained for up to 30 days (Edge plan) or 7 days (Free/Pro plans). Upon account deletion, all personal data is permanently deleted within 30 days.

8. Cookies

We use essential cookies only — specifically the authentication session token required to keep you logged in. We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice.

10. Contact

For any privacy-related questions, contact us at privacy@bullscans.com.