Privacy Policy

Last Updated: [Date]

[Placeholder: Add an introduction explaining your commitment to user privacy and the purpose of this policy.]

1. Information We Collect

We collect the following types of information:

• Information you provide: When you sign up using Google Sign-In, we receive information associated with your Google account (such as your name, email address, and profile picture). When you complete your profile setup, we collect the username you choose. If you subscribe to Premium, our payment processor (Stripe) collects your payment information directly; we only receive confirmation of payment and necessary subscription management details (like customer ID, subscription status).
• Information from your use of the service: We collect information about the Popular Investors you follow using our service, your notification preferences, settings (like blocked users or equity start amount), and potentially usage data (like pages visited, features used) through standard web analytics tools (e.g., Firebase Analytics, Google Analytics).
• Content you generate: If you use features like the post feed or direct messaging, we collect the content you submit (posts, comments, messages, images).

[Placeholder: Be more specific about any analytics or other data collected automatically.]

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services (authenticate you, display data, send notifications).
• Process your subscription payments (via Stripe).
• Personalize your experience (e.g., using your settings).
• Communicate with you (e.g., service updates, support responses).
• Improve our website and services (through usage analysis).
• Enforce our Terms and Conditions and prevent misuse.

3. How We Share Your Information

We do not sell your personal information. We may share information under the following circumstances:

• With Service Providers: We use third-party services like Google Firebase (for authentication, database, hosting, cloud functions, analytics) and Stripe (for payment processing). These providers only have access to the information necessary to perform their functions and are obligated to protect your data.
• For Legal Reasons: We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: If Marau-Labs is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

[Placeholder: Explicitly mention Firebase and Stripe. Review their privacy policies.]

4. Data Storage and Security

We use Firebase Firestore and Firebase Storage, hosted by Google Cloud Platform, to store your data. We implement reasonable security measures (leveraging Firebase security features) to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no internet transmission or electronic storage is 100% secure.

[Placeholder: Briefly mention data location if known, e.g., Firebase regions.]

5. Data Retention

[Placeholder: Explain how long you keep user data. E.g., Account data retained as long as the account is active, subscription data as required for financial records, usage data may be anonymized or deleted after a period.]

6. Cookies and Tracking Technologies

[Placeholder: Explain your use of cookies. Firebase Auth uses cookies for session management. If you use Firebase/Google Analytics, mention that. Explain the purpose (authentication, analytics, preferences) and how users might manage cookies via browser settings.]

7. Your Data Protection Rights (GDPR/UK GDPR)

If you are located in the UK or European Economic Area, you have certain data protection rights:

• The right to access, update, or delete the information we have on you.
• The right of rectification.
• The right to object.
• The right of restriction.
• The right to data portability.
• The right to withdraw consent.

To exercise these rights, please contact us using the details below. You also have the right to complain to a data protection authority.

[Placeholder: Ensure this section accurately reflects rights under relevant laws. Using a template service is highly recommended here.]

8. Children's Privacy

Our service is not intended for use by children under the age of 16 [Adjust age as appropriate for your jurisdiction/terms, e.g., 13 or 18], and we do not knowingly collect personal information from children.

9. Changes to This Privacy Policy

[Placeholder: Reserve the right to update the policy and explain how users will be notified.]

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at: [Your Support Email Address]