Privacy Policy

What we collect

• Account: email, name, password (stored only as a one-way hash) or your Google sign-in, plan and billing status.
• What you put in: investor profile answers, portfolios and positions, watchlists, followed sectors, alerts, AI Analyst conversations and research questions.
• Payments: handled by Stripe; we store your Stripe customer and subscription IDs, not card details.
• Usage: server logs (IP address, browser, pages and API calls) for security, rate limiting and debugging, and privacy-friendly page analytics that use no cookies and don't identify you.

How we use it

To run the Service you asked for (your portfolios, alerts, digests, AI answers), to bill you, to keep accounts secure and prevent abuse, to send the emails you opted into and essential account messages, and to understand and improve the product.

Who we share it with

Only service providers who process data on our behalf, under contract, for the purposes above:

• Google Cloud — hosting, database and storage for the whole Service.
• Stripe — payments and subscription billing (we never see your full card number).
• Resend — sending account and newsletter emails.
• Anthropic — AI Analyst and deep research: your questions, plus the profile, portfolio or watchlist details a question needs, are sent to generate the answer.
• Google — sign-in, if you choose “Continue with Google”.
• MacroReply — the feedback widget: your email, account id and plan, only when you send feedback.

We may also disclose data if the law requires it, to protect our rights or users, or as part of a merger or sale of the business (with notice to you). Anything you choose to make public — a shared analysis or a public profile — is visible to anyone with the link.

Cookies

We use only the cookies needed to keep you signed in. We don't use advertising or cross-site tracking cookies.

Your choices and rights

• Download your data or delete your account at any time from Settings. Deletion removes your account and everything it owns and cancels any subscription immediately.
• Emails: every newsletter, brief and alert email has a one-click unsubscribe link; you can also change them in your watchlist settings.
• Access, correction, objection: depending on where you live (for example the EU, UK or California) you may have further rights. Email us and we'll respond within 30 days.

Retention and security

We keep your data while your account exists and delete it when you delete the account. Server logs and backups roll off on their own schedule, typically within 30 days. Billing records are kept as long as tax law requires. Data is encrypted in transit and stored in Google Cloud in the United States; access is limited to what's needed to run the Service.

Children

Roiver is not for anyone under 18, and we don't knowingly collect their data.

Changes

If we change this policy materially we'll tell you by email or in the Service before the change takes effect.