This policy applies to the PyInvesting website, account features, research tools, community areas, subscriptions, and related communications. “PyInvesting”, “we”, “us”, and “our” refer to the operator of this online service. This wording does not state or imply a particular corporate form. This policy is a notice about our data practices and is separate from the contractual Terms of Use.
At a glance
Your public identity choices
- Your account name and email address are private account information.
- Community activity uses a system-generated alias instead of your account name.
- Your profile is private by default. You can choose to publish a separate public profile.
- You can withdraw public-profile publication from your account controls.
Public identity and community content
Each account receives a system-generated alias that is not based on the account holder's name, email address, or sequential account number. Posts, replies, and other community activity display that alias. A public profile is optional, private by default, and published only after a separate choice in profile settings. Public profiles are not included in our sitemaps and are marked not to be indexed in this release.
If you choose to publish a profile, its alias, public biography, and processed public avatar may be visible to anyone with the link. You can withdraw publication at any time; withdrawal stops the profile from being served publicly. Search engines and third-party caches may take additional time to remove copies they previously collected.
Do not post another person's contact details, precise location, government identifiers, or other sensitive personal information. We use automated checks for high-confidence disclosures and may reject, hide, redact, or review public contributions. You can report personal information for review.
Data we collect
Information you provide
- Account data: private account name, email address, authentication records, and account settings.
- Legal acceptance evidence: the accepted document versions, server-recorded acceptance time, source of the acceptance, IP address, and browser user-agent. This evidence helps us administer the agreement, respond to disputes, and demonstrate when current notices were acknowledged.
- Profile and community data: generated alias, optional public biography and processed avatar, posts, replies, reports, and moderation history.
- Research data: saved strategies, portfolios, parameters, watchlists, simulations, notes, and related preferences.
- Transaction and support data: subscription status, payment references supplied by payment providers, correspondence, and support requests. We do not intentionally store full payment-card numbers.
- Marketing choices: whether you separately opted in to, withdrew from, or unsubscribed from optional messages.
Information collected automatically
We may collect IP address, device and browser information, timestamps, requested pages, referring pages, session and security events, and diagnostic information needed to operate, secure, and improve the service.
Third-party sign-in
If you use Google sign-in, Google provides the verified email address and profile details permitted by that sign-in flow. Those details are treated as private account information. Third-party sign-in does not publish a profile, import an avatar for public display, subscribe you to marketing, or create a legal acknowledgement on your behalf.
How we use data
We use personal data where needed to provide requested services, perform a contract, protect legitimate operational and security interests, comply with legal obligations, or act on consent where consent is the appropriate basis. Uses include:
- creating and administering accounts, subscriptions, saved research, and community features;
- authenticating users, preventing fraud and abuse, investigating security events, and enforcing terms;
- processing transactions through payment providers and sending service communications;
- responding to support, privacy, access, correction, deletion, and safety requests;
- maintaining, debugging, measuring, and improving reliability and usability; and
- sending optional marketing only according to your recorded choice and applicable law.
PyInvesting's research outputs are tools for your own analysis. We do not use account data to make decisions that produce legal or similarly significant effects about you.
Cookies and similar storage
We use browser cookies and similar storage needed for login sessions, security, request integrity, preferences, and core service operation. Some features may also use measurement cookies where configured and permitted. You can block cookies in your browser, but essential account and security features may then stop working. We do not use Flash cookies.
Sharing and international transfers
We do not sell personal data. We may disclose only the data reasonably necessary to service providers that support hosting, security, email delivery, analytics, authentication, payments, market data, and customer support. Providers act under applicable contractual or legal duties. We may also disclose data when required by law, to protect users or the service, to establish or defend legal claims, or as part of a genuine business reorganisation with appropriate safeguards.
Providers may process data in Singapore or other countries. Where required, we use contractual, organisational, and technical safeguards intended to provide protection comparable to applicable requirements. Contact us if you want information about safeguards relevant to your data.
Retention
We retain personal data only for as long as reasonably necessary for the purposes described here. The period depends on account status, the feature used, contractual needs, security and fraud risk, dispute and limitation periods, backup cycles, and legal or regulatory obligations. Public-profile withdrawal is immediate in the application, but underlying account records, legal acceptance evidence, moderation evidence, transaction records, and security logs remain subject to lawful retention where necessary. When data is no longer required, we delete or anonymise it according to operational processes.
Security and incident response
We use administrative, technical, and organisational measures designed to protect personal data, including access controls, transport security, private-by-default publication controls, restricted legacy media, and review of public-content disclosures. No internet or storage system can be guaranteed completely secure. Where required by applicable law, we will assess and notify affected individuals or the relevant authority of a notifiable breach.
Your rights and choices
Depending on your location and applicable law, you may request access to or correction of personal data, withdraw consent, object to or restrict certain processing, request portability, or request deletion. You may also withdraw public-profile publication and change optional marketing preferences through available account controls.
Requests are assessed against applicable law. We may need to verify your identity and may retain limited information where required for security, legal compliance, dispute resolution, or the rights of others. To make a request or appeal a response, use our privacy contact route. You may also complain to the data-protection authority that applies to you.
Children
The service is intended only for people aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.
Changes to this policy
We may update this policy as the service or legal requirements change. We will post the revised version and effective date here and provide additional notice when a change is material or applicable law requires it. Earlier processing remains governed by the policy and legal basis applicable at that time.
Contact
For privacy questions, personal-information reports, or rights requests, contact the data-protection contact through our contact page. Please avoid including sensitive information until we confirm what is needed. We may request information necessary to authenticate and scope your request.