Privacy Policy

PocketAnalyst is a product of Nisquare Ltd, a company registered in England and Wales (Company No. 16294648).

Registered address: [REGISTERED_ADDRESS]

ICO Registration No: [ICO_REGISTRATION_NUMBER]

Contact: hello@pocketanalyst.co.uk

Nisquare Ltd is the data controller for all personal data processed through PocketAnalyst.

• Email address — collected when you sign up or sign in. Used to send your sign-in link and, if you opt in, your morning market brief.
• Portfolio data — if you upload a CSV export from your broker, we store a snapshot of your holdings (stock names, tickers, share quantities, approximate values). We never store or request your broker login credentials.
• Watchlist items — stocks and funds you choose to track.
• Q&A history — questions you ask the AI assistant, retained to power your "recent questions" list and to improve the service.
• Usage data — which features you use, how often, and when. Collected via PostHog (EU cloud) to help us improve the product. This data is anonymised where possible.
• Session cookies — a secure, HTTP-only cookie that keeps you signed in. No tracking cookies are used.

• To send you sign-in links (magic links) via email.
• To deliver your personalised morning market brief and alerts, if you have opted in.
• To provide portfolio intelligence, watchlist tracking, and AI-powered Q&A.
• To improve the product through anonymised usage analytics.
• To manage your subscription and trial period.

We do not use your data for advertising, profiling for third parties, or automated decision-making that produces legal effects.

We share your data only with the third-party processors required to operate the service:

• Railway (railway.app) — cloud hosting and PostgreSQL database. EU-accessible infrastructure. Data processed under Railway's DPA.
• Vercel — frontend hosting. Data processed under Vercel's DPA.
• Resend (resend.com) — transactional email delivery (sign-in links, morning briefs). Your email address is shared with Resend solely for delivery purposes.
• PostHog (EU cloud, eu.posthog.com) — product analytics. Usage events are sent to PostHog's EU servers. No financial data is included in analytics events.

We do not sell, rent, or trade your personal data with any third party.

• Account data (email, watchlist, portfolio) — retained for as long as your account is active, plus 30 days after deletion to allow recovery.
• Q&A history — retained for 90 days, then automatically deleted.
• Usage analytics — retained for 12 months per PostHog's standard policy.
• Session cookies — expire after 30 days of inactivity.

As a UK resident you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your account and all associated data.
• Portability — receive your data in a machine-readable format.
• Restriction — ask us to stop processing your data in certain circumstances.
• Object — object to processing based on legitimate interests.

To exercise any of these rights, email us at hello@pocketanalyst.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the ICO (ico.org.uk).

All data is transmitted over HTTPS (TLS 1.2+). Database connections are encrypted. Passwords are never stored — we use passwordless magic links only. Portfolio CSV files are processed in memory and never stored as raw files on our servers.

We do not store broker login credentials at any time.

We use one first-party cookie: pa_session — a secure, HTTP-only session token. It contains no personal data and is used only to keep you signed in.

We do not use advertising cookies, third-party tracking cookies, or fingerprinting.

We may update this policy from time to time. Material changes will be notified via the email address associated with your account. Continued use of the service after notification constitutes acceptance of the updated policy.

Questions about this policy? Email us at hello@pocketanalyst.co.uk.