Privacy Policy

Last updated: October 2025

Important Notice

⚠️ Not Financial Advice

Stock Rocket AI provides analytical tools and information only. Our service does not constitute financial, investment, legal, or tax advice. All investment decisions are your own responsibility. Always consult with a qualified financial advisor before making investment decisions.

This Privacy Policy explains how Stock Rocket AI ("we", "us", "our") collects, uses, and protects your personal information when you use our service. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

1.1 Personal Information

When you register for or use Stock Rocket AI, we may collect:

Name and contact information (email address)
Account credentials and authentication data
Payment and billing information (processed securely through third-party payment processors)
Profile information and preferences

1.2 Usage and Technical Information

When you use our service, we automatically collect:

Device information (device type, operating system, browser type)
IP address and approximate geographic location
Usage data (pages visited, features used, time spent)
Search queries and stock tickers analyzed
Error logs and technical diagnostics

1.3 Content You Provide

We collect information you voluntarily provide, including stock reports you create, notes, saved analyses, and any feedback or communications you send to us.

2. How We Use Your Information

We use your personal information for the following purposes:

Service Provision: To provide, maintain, and improve our stock analysis service, including generating AI-powered reports and analysis
Account Management: To create and manage your account, process payments, and communicate about your account
Personalisation: To customise your experience, save your preferences, and provide relevant content
Communication: To send service updates, security alerts, and respond to your inquiries
Analytics: To understand how our service is used, identify trends, and improve functionality
Legal Compliance: To comply with applicable laws, regulations, and legal obligations
Security: To protect against fraud, abuse, and security threats

3. Legal Basis for Processing

Under UK GDPR, we process your personal information on the following legal bases:

Contract Performance: To fulfil our contract with you to provide the service
Consent: Where you have given clear consent for specific purposes (e.g., marketing communications)
Legitimate Interests: For service improvement, security, and fraud prevention (balanced against your rights)
Legal Obligation: To comply with applicable laws and regulations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: With trusted third-party service providers who assist in operating our service (e.g., cloud hosting, payment processing, analytics). These providers are contractually bound to protect your information
AI Service Providers: Your queries and stock analysis requests may be processed by third-party AI services (e.g., Google Gemini, xAI) to generate insights. These services are used in accordance with their privacy policies
Legal Requirements: When required by law, court order, or regulatory authority, or to protect our rights and safety
Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
With Your Consent: Where you have explicitly agreed to share information

5. Data Storage and Security

5.1 Data Retention

We retain your personal information for as long as necessary to provide our service and fulfil the purposes outlined in this policy. Account information is retained while your account is active. After account deletion, we may retain certain information for legal, regulatory, or legitimate business purposes (e.g., fraud prevention, tax compliance) for a limited period.

5.2 Security Measures

We implement appropriate technical and organisational measures to protect your personal information, including:

Encryption of data in transit and at rest
Secure authentication and access controls
Regular security assessments and updates
Employee training on data protection

5.3 International Transfers

Your information may be processed and stored outside the UK/EEA (e.g., by our cloud service providers). When we transfer personal data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) or adequacy decisions.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal information:

Right of Access: Request a copy of the personal information we hold about you
Right to Rectification: Request correction of inaccurate or incomplete information
Right to Erasure: Request deletion of your personal information in certain circumstances
Right to Restrict Processing: Request limitation of how we use your information
Right to Data Portability: Receive your information in a structured, commonly used format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent where processing is based on consent
Right to Lodge a Complaint: Complain to the ICO if you believe your rights have been violated

To exercise these rights, please contact us at the details provided in Section 9. We will respond within one month, subject to verification of your identity.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyse usage, and support functionality. Types of cookies we use:

Essential Cookies: Required for the service to function (e.g., authentication, security)
Functional Cookies: Remember your preferences and settings
Analytics Cookies: Help us understand how the service is used

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect service functionality.

8. Children's Privacy

Stock Rocket AI is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately. If we become aware of such collection, we will take steps to delete the information promptly.

9. Contact Information

If you have questions, concerns, or wish to exercise your rights regarding this Privacy Policy or our data practices, please contact us:

Stock Rocket AI

Send us a direct message on X for privacy-related inquiries, data protection questions, or to exercise your rights under UK GDPR.

You also have the right to lodge a complaint with the UK's Information Commissioner's Office (ICO) if you believe we have not adequately addressed your concerns:

Information Commissioner's Office

Website: www.ico.org.uk

Helpline: 0303 123 1113

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. For significant changes, we may also notify you by email or through the service. We encourage you to review this policy periodically.