Privacy Notice

1. Scope

This Privacy Notice describes how StockMetaFlow may process personal data when you create an account, sign in, verify your email, use Google sign-in, purchase plans or credits, upload files, generate outputs, or contact support.

2. Data We May Process

• Account data such as email address, display name, verification status, and login/session records.
• Google sign-in data such as email, profile name, account identifier, and hosted domain details provided by Google.
• Billing-related data such as selected plans, credit events, payment records, and transaction references.
• Service usage data such as technical logs, settings, job records, quotas, storage usage, and diagnostics.
• User content such as uploaded files, prompts, generated outputs, exports, and workflow-related metadata.
• Support and contact communications.
• Marketing preference data where you separately opt in to product updates.

3. Why We Process Data

StockMetaFlow may process personal data to provide the service, manage authentication, secure accounts, verify email addresses, process payments, operate AI features, store user content, respond to support requests, prevent abuse, and send required service communications.

Marketing emails should only be sent where the user has separately opted in or another lawful basis applies.

4. Legal Bases

Depending on the context, processing may rely on contract performance, legal obligations, legitimate interests, or user consent for optional marketing or non-essential technologies.

5. Sharing and Processors

StockMetaFlow may rely on hosting, identity, transactional email, payment, analytics, security, and backup providers. Google may act as an identity provider for optional Google sign-in, and Stripe may act as the payment provider for paid checkouts.

Pending launch data: operator name, support/privacy contacts, hosting provider, email provider, analytics provider, retention details.

6. Retention and Security

Data may be retained for service delivery, legal compliance, accounting, dispute resolution, security, and abuse prevention. Uploaded files and generated outputs should only be kept for as long as needed for service operation or user access, while billing and payment records may need longer retention for accounting, fraud prevention, and legal obligations.

Passwords and verification/session secrets should not be stored in plaintext. The final notice will include concrete retention periods.

7. Your Rights

Depending on applicable law, users may have rights to access, correct, delete, restrict, object, port certain data, and withdraw consent for optional processing.

8. Cookies and Similar Technologies

StockMetaFlow may use cookies, local storage, and similar technologies for authentication, preferences, security, analytics, and consent management. The final version will reflect the actual technologies enabled at launch.

9. Finalization

Before public launch, this notice will be updated with the real operator identity, contact details, processor list, retention periods, regional legal language, and any cookie or analytics specifics.