隐私政策
1. 我们收集的信息
- 账号信息：您注册时提供的电子邮箱，以及您填写的姓名（如有）。密码由 Firebase Authentication 以哈希形式保管，我们无法读取。
- 研究订单：您提交的股票代码、订单状态、点数余额与流水，以及报告的投递记录（收件邮箱与发送时间）。
- 持仓与关注：您录入的交易（日期、时间、代码、买入或卖出、股数、价格、账户名称）与关注列表（含您设置的关注价）。
- 提醒与周报：提醒邮件的开关与发送记录；周报的送达时间、送达方式与周报存档（保留最近 12 份）。
- 追踪名单：根据您的持仓与关注生成的股票代码清单，只含代码，不含股数、价格与邮箱，用于安排这些股票的研究更新。
- 订阅与试用：订阅档位、状态、本期到期时间、Stripe 订阅编号，以及是否用过 7 天试用。为防止同一张银行卡重复试用，我们保存 Stripe 提供的银行卡指纹（不是卡号）。
- 付款信息：付款由 Stripe 处理，我们只保存订单号、金额、币种与到账状态，不存储银行卡号。
- 语言偏好：您在设置页选择的界面与邮件语言。
- 技术信息：服务器日志中的访问时间、IP 地址与浏览器信息，用于安全与故障排查。
2. 信息的用途
用于向您提供服务（生成与发送研究报告、组合与关注页面、每日两版、提醒邮件与周报、订阅与股票追踪）、账号安全（邮箱验证、密码重置）、以及必要的客户支持与故障排查。我们不会出售您的个人信息，也不用于第三方广告。
3. 第三方服务
我们使用 Firebase（Google）进行身份认证与数据存储，使用 Stripe 处理付款与订阅，通过 Google Workspace 发送邮件，并在 deedalpha.com 上使用 Google Analytics 统计访问量（见第 7 条）。这些服务商依其各自的隐私政策处理数据。
4. 存储与安全
数据存储于 Google Cloud。传输全程使用 HTTPS 加密。我们采取合理的技术与管理措施保护数据，但无法保证绝对安全。
5. 保留期限
账号存续期间我们保留上述信息；订单、付款、订阅与退款记录及点数流水作为交易记录保留。长期未验证的注册账号可能被清理。
6. 您的权利
- 导出：您可在“设置 › 数据”中导出录入的全部交易记录（CSV 文件）。关注列表、提醒记录、周报存档等其他数据如需副本，请发邮件联系我们。
- 删除账户：您可在“设置 › 数据”中删除账户。删除时我们删除：登录账号、姓名、邮箱（含历史邮箱）、邮箱映射、邮件退订偏好、持仓与关注、提醒与周报的设置和存档、追踪名单。我们保留（不含姓名与邮箱，仅按账号编号）：付款、订阅与退款记录及点数流水，用于财务核算与依法留存。已生成的研究报告的投递记录（含收件邮箱）随订单留存。删除时未使用的付费部分按服务条款原路退还。
- 邮箱指纹：账户删除后，我们只保留您邮箱的不可还原指纹（SHA-256 哈希）与删除时间，用于同一邮箱再次注册时不再提供免费阅读一篇研究与 7 天试用；不保留邮箱原文。
- 更正：如需更正信息，请通过 [email protected] 联系我们。
7. Cookie 与本地存储
我们使用浏览器本地存储保存登录令牌与语言偏好。在 deedalpha.com 上，我们使用 Google Analytics 统计访问量，Google Analytics 会在您的浏览器中设置 Cookie。您可以在浏览器设置中清除或阻止这些 Cookie。
8. 政策变更
本政策更新后会在本页标注日期。
Privacy Policy
1. Information we collect
- Account information: the email address you register with and, if provided, your name. Passwords are stored as hashes by Firebase Authentication; we cannot read them.
- Research orders: the tickers you submit, order status, points balance and ledger, and report delivery records (recipient email and send time).
- Holdings and watchlist: the transactions you enter (date, time, ticker, buy or sell, shares, price, account name) and your watchlist, including any watch price you set.
- Alerts and weekly reports: your alert email setting and alert records; your weekly report delivery time, delivery method and archive (the latest 12).
- Tracked-ticker list: a list of tickers derived from your holdings and watchlist. It contains tickers only, with no shares, prices or email, and is used to schedule research updates for those tickers.
- Subscription and trial: your plan, status, current period end, Stripe subscription ID, and whether you have used the 7-day trial. To prevent repeat trials on the same card, we keep the card fingerprint provided by Stripe (not the card number).
- Payment information: payments are processed by Stripe. We keep only the order reference, amount, currency and settlement status, never card numbers.
- Language preference: the site and email language you choose in Settings.
- Technical information: access times, IP addresses and browser details in server logs, used for security and troubleshooting.
2. How we use it
To provide the Service (generate and deliver research reports, the portfolio and watchlist pages, daily notes, alert emails and weekly reports, subscriptions and ticker tracking), keep your account secure (email verification, password reset), and provide necessary support and troubleshooting. We do not sell your personal information or use it for third-party advertising.
3. Third-party services
We use Firebase (Google) for authentication and data storage, Stripe for payments and subscriptions, Google Workspace to send email, and Google Analytics on deedalpha.com to measure traffic (see section 7). These providers process data under their own privacy policies.
4. Storage and security
Data is stored on Google Cloud. All transmission is encrypted over HTTPS. We take reasonable technical and organisational measures to protect data but cannot guarantee absolute security.
5. Retention
We retain the above information while your account exists; orders, payment, subscription and refund records and the points ledger are kept as transaction records. Registrations left unverified for an extended period may be removed.
6. Your rights
- Export: you can export every transaction you have entered (CSV file) under Settings › Data. For a copy of other data such as your watchlist, alert records or weekly report archive, please email us.
- Delete your account: you can delete your account under Settings › Data. We then delete your sign-in, name, email addresses (including past ones), email mappings, email unsubscribe preferences, holdings and watchlist, alert and weekly report settings and archives, and your tracked-ticker list. We keep, without your name or email and only under your account ID, payment, subscription and refund records and the points ledger, for accounting and legal retention. Delivery records of research reports already generated (including the recipient email) stay with those orders. Unused paid amounts are refunded to the original payment method under the Terms of Service.
- Email fingerprint: after deletion we keep only an irreversible fingerprint of your email (a SHA-256 hash) and the deletion time, so that registering again with the same email does not grant the first free report or the 7-day trial again. We do not keep the email itself.
- Corrections: to correct your information, contact [email protected].
7. Cookies and local storage
We use browser local storage for your session token and language preference. On deedalpha.com we use Google Analytics to measure traffic, and Google Analytics sets cookies in your browser. You can clear or block these cookies in your browser settings.
8. Changes
Updates to this policy will be dated on this page.