Privacy Policy
1. Scope
This policy describes how GrahamTerminal LLC ("we," "us") collects, uses, and shares information when you use grahamterminal.com and related services (the "Service").
2. Information We Collect
- Account information. If you create an account, our authentication provider (Clerk) collects your email address, name, and — if you sign in with a third-party provider such as Google — basic profile information from that provider. We receive your user ID, email, and display name.
- Content you create. Watchlists, paper-trading portfolios and trades, display names, sharing/leaderboard settings, and preferences you save.
- Searches. When you pick a result from the site search, we record the text you typed, what you selected, and the time, along with your IP address and browser. We use it to see which companies people look for and to improve the search itself.
- Messages you send us. If you use the contact form, we keep your email address, the topic, your message, and your IP address so we can reply and limit abuse.
- Newsletter signup. If you subscribe to our email newsletter, we keep your email address, when and where on the site you signed up, and your IP address (used to limit abuse). We send a welcome email when you sign up, and every email we send — including that one — carries a one-click unsubscribe link. Unsubscribing stops all newsletter email immediately. If an address was entered by mistake, the unsubscribe link in the welcome email removes it.
- Automatic data. Standard server logs (IP address, browser type, pages requested, timestamps) and client-side error reports (page, error message, browser version) used for security and debugging. We also measure aggregate site usage (pages viewed, referring sites, approximate visitor counts) with cookieless analytics: it sets no cookies, stores nothing in your browser, and counts visitors with a short-lived, irreversible hash rather than an identifier, so it cannot build a profile of you or follow you across sites.
- Cookies and local storage. We use authentication cookies (set by Clerk) to keep you signed in, and browser local storage for preferences such as theme. We do not use third-party advertising cookies.
3. How We Use Information
- Provide and operate the Service (accounts, watchlists, portfolios, leaderboards you opt into);
- secure the Service, prevent abuse, and debug errors;
- communicate with you about your account or material changes to the Service or these policies;
- understand aggregate usage to improve the Service.
We do not sell your personal information, and we do not share it with third parties for their own advertising.
4. How We Share Information
- Service providers that process data on our behalf: authentication (Clerk), server and site hosting, email delivery (including Resend, Inc. for the newsletter, processed in the United States), and cookieless web analytics (PostHog, Inc., processed in the United States). They may use the data only to provide their services to us.
- Public features you opt into. If you enable a public share link or join the leaderboard, the portfolio data and display name you chose become publicly visible.
- Legal. We may disclose information if required by law or to protect the rights, safety, or property of GrahamTerminal LLC, our users, or the public.
- Business transfers. In a merger, acquisition, or sale of assets, user information may transfer as part of the transaction, subject to this policy.
5. Data Retention
Account data and content you create are retained while your account is active. If you delete your account from Settings, that data is deleted straight away. If you ask us to delete it by email instead, we do so within a reasonable period. In either case we may keep records we are required to retain for security, legal, or accounting purposes. Server logs are retained on a rolling basis.
6. Security
We use reasonable technical and organizational safeguards — encrypted transport (HTTPS), hosted authentication with industry-standard token handling, and access controls. No system is perfectly secure; please use a strong, unique password.
7. Your Rights and Choices
- You can access and update account details from your account page, and delete portfolios at any time.
- You can delete your account yourself from Settings → Delete account — you do not need to email us. This deletes your portfolios and the trades in them, your saved strategies and backtests, your watchlist, your display name, and your settings. Any public portfolio links you have shared will stop working. Deletion is immediate and cannot be undone. Afterwards we keep only a dated note that the account was deleted, with your email address removed, so we can show that the request was carried out.
- You may also request a copy, correction, or deletion of your personal data by emailing legal@grahamterminal.com. We will verify and respond as required by applicable law.
- Do Not Track and Global Privacy Control. We do not track you across other websites, and we do not use advertising or cross-site analytics cookies. Our own analytics is cookieless and aggregate — it sets no identifier in your browser and does not follow you anywhere. Some parts of the site are loaded from third-party providers — web fonts, charting libraries, company logos, our sign-in provider and our analytics provider — and those providers necessarily see your IP address when your browser fetches them; we do not authorise them to track you across other sites. Because there is no cross-site tracking here to switch off, we do not change what we do in response to a browser "Do Not Track" or Global Privacy Control signal. We also do not sell or share personal information, so there is nothing to opt out of.
- California residents have the rights provided by the CCPA/CPRA, including to know, delete, and correct personal information, and to be free from discrimination for exercising those rights. We do not "sell" or "share" personal information as defined by the CCPA.
- EEA/UK visitors: we process personal data to perform our contract with you (operating the Service), for our legitimate interests (security, improvement), and with your consent where required. You have rights of access, rectification, erasure, restriction, portability, and objection, and may lodge a complaint with your supervisory authority.
8. Children
The Service may not be used by anyone under 18 and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.
9. International Transfers
We are based in the United States and process data on servers in the United States and Europe. By using the Service you understand your information will be processed in these locations, which may have different data-protection laws than your jurisdiction.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be announced on the Service or by email, with the effective date shown above.
11. Contact
GrahamTerminal LLC · legal@grahamterminal.com