# Stock Watch privacy notice

This notice describes the private beta configuration of Stock Watch.

## Information stored

- Your email address, used to issue invitations and identify your account.
- Your saved tickers, selected metrics, column order, and onboarding state.
- Session records needed to keep you signed in and revoke access immediately.
- Security activity records for invitations, revocations, account access changes, and
  successful sign-ins. These include the event time, email involved, acting
  administrator, request ID, and directly connected client address. Invitation and
  session secrets are not included.
- Shared market-data cache entries used to avoid duplicate provider requests. These
  entries are shared application data and are not tied to your account.

## Access and retention

Administrators can disable an account, which invalidates its active sessions. Account
data is retained while the account is active or as needed to operate the beta, and it
can be permanently removed through the administrator account-deletion control. This
removes live watchlist settings, sessions, and invitations; the deleted account's email is
replaced in the security audit history with a non-reversible placeholder, and a minimal
account-deletion event remains. Invitation links are
one-time secrets and should be treated like passwords until redeemed or revoked.
Expired invitation records are retained for 30 days by default and security activity
for one year by default; the operator can adjust these periods for the hosted beta.

## Providers and security

Market-data requests are sent to the configured data providers. Provider-specific
licensing and redistribution terms must be reviewed before public launch. Production
deployments should use HTTPS, secure HTTP-only cookies, private database backups, and
centralized error monitoring.

For privacy questions or account removal requests, contact the Stock Watch operator.