Privacy policy.
Last updated May 13, 2026.
1. What we collect
Account data you provide: email address, optional display name, and authentication tokens from third-party providers (Google, Apple) if you choose them.
Usage data: pages visited, articles read, watchlist symbols, alerts configured, Rocky queries. Used to operate and improve the Service.
Technical data: IP address, browser, device, language. Used for security, fraud prevention and aggregate analytics.
2. What we don't collect
We do not collect financial account credentials. We do not connect to your brokerage. We do not have visibility into your trades.
We do not sell your personal data to third parties. Ever.
3. How we use it
To operate the Service: serve content, run watchlists and alerts, generate Rocky responses.
To improve the Service: aggregate analytics on what content performs, where users get stuck, and which features matter.
To communicate with you: email about your account, optional newsletters you opted into, support responses.
4. Cookies and storage
We use cookies for authentication, session state and theme preferences. We do not use third-party advertising cookies.
Watchlists and bookmarks are stored locally in your browser via localStorage when you are not signed in. Sign in to sync them across devices.
5. Third parties
We use a small number of vendors to operate: Vercel/Cloudflare (hosting), Stripe (payments), Resend (email), PostHog (product analytics), Anthropic (Rocky model). Each vendor handles only the data necessary for its function.
Vendor list and DPAs available on request from privacy@rockstarmarkets.com.
6. Your rights
Access: request a copy of your personal data.
Correction: ask us to correct inaccurate data.
Deletion: ask us to delete your account and associated data.
Portability: request export of your watchlists, bookmarks and Rocky chat history.
Opt-out: unsubscribe from any newsletter from the email itself.
Submit any of these to privacy@rockstarmarkets.com. We respond within 30 days.
7. Children
The Service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have, contact us and we will delete it.
8. International transfers
We may transfer data to the United States or other jurisdictions where our vendors operate. We rely on standard contractual clauses for transfers from the EEA, UK and Switzerland.
9. Retention
Active account data: retained for as long as your account is active.
Deleted accounts: data deleted within 30 days of deletion request, except where retention is required by law.
Backups: retained up to 90 days then automatically purged.
10. Security
TLS in transit, encryption at rest, scoped access controls, audit logging. We will notify affected users within 72 hours of any confirmed material breach.
11. Changes
We may update this policy. Material changes will be communicated via email or in-product. Continued use constitutes acceptance.
12. Contact
Questions or requests: privacy@rockstarmarkets.com.