Privacy Policy
What we collect
- Account data: your email address and a salted, hashed password (we never store your plain-text password).
- Product data: your watchlists, alert rules and fired alerts, and your digest opt-in choice.
- Billing data: payments are processed by Stripe. We receive and store your Stripe customer/subscription identifiers and subscription status — never your full card number.
- Basic logs: standard server logs (timestamps, pages requested) used to keep the service running and secure.
What we do with it
We use this data only to run FlowScope: sign you in, show your watchlist, fire your alerts, send the daily digest if you opted in, and manage your subscription. We do not sell personal data, and we do not share it except with the processors needed to operate the service (currently Stripe for payments and our email provider for the digest).
Cookies
One cookie: a session cookie that keeps you signed in. It is HttpOnly, contains a random token, and expires after 30 days or when you log out. No advertising or cross-site tracking cookies.
Your choices
You can opt out of the digest, delete alert rules and watchlist items at any time in the app, and ask us to delete your account and its data by emailing Zareeisasan500@gmail.com. Deleting your account removes your watchlists, rules and alerts; billing records held by Stripe remain subject to Stripe's own policies.
Security
Passwords are hashed with PBKDF2-HMAC-SHA256 and per-user salts; session tokens are stored only as hashes. No system is perfect — use a unique password for your account.