This Privacy Policy explains how the Stock Surge Dashboard (“we”, “our”, “the Service”)
collects, uses, and protects your information. By using the Service, you agree to the
terms described in this policy.
2. Information We Collect
We collect only essential user information required to provide access to the dashboard:
Username
Email address
Password (securely hashed with bcrypt)
First name
Last name
No financial data or payment information is collected.
3. Automatically Collected Data
For security and system integrity, limited technical information may be collected:
IP address (server logs)
Browser or device type
Error/event logs
We do not use tracking cookies or third-party analytics.
4. How Your Information Is Used
Your information is used solely to:
Authenticate and secure your account
Provide access to dashboard features
Allow admin-level user management
Protect against unauthorized access
We never sell or share personal information with third parties.
5. Cookies and Sessions
We use only essential session cookies to maintain login state.
No tracking, marketing, or advertising cookies are used.
6. Data Storage and Security
All user data is stored locally on Render.com using a secure persistent volume.
Passwords are hashed using bcrypt. Strong security measures and access controls
are implemented to safeguard stored data.
7. Data Sharing
We do not share your information with:
Advertisers
Marketing partners
Data brokers
Third-party platforms
Data may only be disclosed if required by law (e.g., government request).
8. Children’s Privacy
This service is intended for users age 18 or older.
We do not knowingly collect data from children under 13.
9. Your Rights
Depending on your location, you may request:
Access to your personal data
Correction or update of your information
Deletion of your account
Restriction of certain data processing actions
To exercise these rights, contact system administration.
10. Data Retention
We retain personal data for as long as your account remains active.
Upon deletion, your information is permanently removed from all databases
and authentication systems. Operational logs may persist but contain no
sensitive identifiers.
11. Third-Party APIs
The dashboard retrieves market data through external APIs
(e.g., Massive/Polygon). These services receive no personal data
from us and have no interaction with your stored information.
12. Policy Updates
We may update this Privacy Policy periodically due to changes in security practices,
new features, or legal requirements. Revised versions will include an updated
“Last Updated” date.