Privacy Policy

Account information: when you sign in with Google, we receive your name, email address, profile picture, and a unique Google identifier. This is stored in our user database to authenticate you and manage your account.

Usage data: we track which stocks you look up, which features you use, page views, and interaction events. This allows us to enforce usage limits, personalize your experience, and improve the Service.

Payment data: when you purchase Premium access, Whop (our payment processor) handles your credit card and billing information. We receive only a subscription status flag and a customer identifier — we do not store your card number or billing address.

Portfolio / watchlist data: if you create watchlists or portfolios, the tickers you add are stored associated with your account.

Communication data: if you email us or subscribe to newsletters, we retain your email preferences and message history.

Technical data: IP address, browser type, device type, referring URL, and other standard HTTP headers. Used for security, diagnostics, and fraud prevention.

We use collected information to:

• Provide and operate the Service (authentication, usage tracking, content delivery)
• Enforce usage limits and premium access
• Process payments via Whop and maintain subscription status
• Send transactional emails (account, billing, security notifications)
• Send marketing emails (newsletter, product updates) only with your consent; you may opt out at any time
• Improve the Service through analytics and aggregated usage insights
• Detect, prevent, and address fraud or abuse
• Comply with legal obligations and respond to lawful requests

We use cookies and similar technologies (localStorage, session tokens) to:

• Essential cookies: maintain your login session and CSRF protection
• Preference cookies: remember your theme, language, and feature preferences
• Analytics cookies: PostHog product analytics (anonymized device ID)
• Advertising cookies: Google AdSense and third-party advertising networks serve ads and measure effectiveness

You can control cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning correctly.

Manage your consent.On your first visit, a banner lets you accept or reject analytics and advertising cookies. You can change your choices at any time via the "Cookie preferences" link in the footer of every page. Rejecting non-essential cookies also opts you out of the "sale" or sharing of personal information under CCPA, and you may withdraw consent at any time under GDPR. Strictly necessary cookies (authentication, security, fraud prevention) cannot be disabled because the Service cannot function without them.

We share data with third parties only as necessary to operate the Service. Each provider has its own privacy policy:

• Google (OAuth authentication): name, email, Google ID
• Whop (payment processing): email, purchase intent
• Financial Modeling Prep (FMP) (financial data): no personal data shared
• AWS (hosting, DynamoDB, SES): all user data is stored in AWS infrastructure
• PostHog (product analytics): anonymized usage events
• Google AdSense (advertising): device identifiers, ad interaction data
• AWS SES (transactional email): email address and message content

We do not sell your personal information to third parties.

We retain your personal data for as long as your account is active or as needed to provide the Service. Specific retention periods:

• Account data: retained until account deletion
• Lookup / usage logs: rolling 90 days
• Subscription billing records: 7 years (tax compliance)
• Analytics data: aggregated indefinitely; individual events 12 months
• Email communication history: up to 2 years, or until you request deletion

You can request deletion of your account and personal data by emailing [email protected]. We will process your request within 30 days, subject to retention requirements imposed by law (e.g. tax and accounting records).

MainRatios is operated from the United States and processes personal information in the United States. Where the data-protection laws of your jurisdiction apply to our processing of your personal information, you may have some or all of the following rights:

• Access: request a copy of your personal data
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your data
• Restriction: limit how we process your data
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interests or for direct marketing
• Withdraw consent: where processing is based on consent, withdraw it at any time
• Complaint: lodge a complaint with the data-protection authority in your jurisdiction

Exercise any of these rights by emailing [email protected]. We will respond within 30 days, subject to identity verification and applicable legal exceptions.

Under the California Consumer Privacy Act (CCPA), you have the right to:

• Know what personal information we collect, use, disclose, or sell
• Request deletion of your personal information
• Opt out of the sale of your personal information (note: we do not sell personal information)
• Non-discrimination for exercising your CCPA rights

Submit CCPA requests to [email protected]. We will verify your identity before processing.

MainRatios uses AWS infrastructure primarily in the United States (us-east-1 region). If you access the Service from outside the U.S., your data will be transferred to and processed in the United States. We rely on appropriate safeguards (including Standard Contractual Clauses where applicable) for cross-border transfers.

The Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a minor, please contact [email protected] and we will delete it promptly.

We implement reasonable technical and organizational measures to protect your data, including encryption in transit (TLS 1.2+), encryption at rest in AWS, least-privilege access controls, and regular security reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

If a data breach involving your personal information occurs, we will notify affected users and relevant authorities without unreasonable delay and within the timelines required by applicable law.

Some browsers transmit a "Do Not Track" (DNT) signal. We do not currently respond to DNT signals due to the lack of an industry standard. However, you can disable cookies and opt out of analytics through your browser settings or our cookie preferences.

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated Policy with a new "Last updated" date and, where required by law, by email notification to account holders.

For privacy questions, data access requests, or to exercise your rights, contact:

[email protected]

See also our Terms of Service.