Privacy policy

1. Who we are and information we process

HowBullish is an AI tool for interpreting information about stocks. HowBullish is operated by Teamory Investment Limited, the controller responsible for the personal data described in this policy.

HowBullish uses Supabase for email and Google authentication. When you start an analysis, pasted source text is sent through our server to OpenRouter and Meta, and analysis results and credit-use records are stored in Supabase for your account. The selected Contributor model provider may use submitted text and responses for model training. Hosting and external image providers may receive technical request information such as IP addresses when you load pages or video thumbnails.

The planned service will process account details, submitted links and content, uploaded documents or recordings, extracted transcripts, analysis results, credit usage and support messages. A payment provider will process payment details; the intended app receives order and subscription status rather than full card details. Document uploads and payments are not yet enabled.

2. Why we use information

The planned purposes are to authenticate accounts, import and analyze requested sources, return results, manage credits and subscriptions, provide support, prevent abuse and meet legal obligations. Where applicable, the legal bases are performance of a contract, legitimate interests in operating and securing the service, legal obligations, and consent for optional processing. Legitimate interests must be balanced against your rights.

Do not submit sensitive personal data or confidential information unless you are authorized to do so. We will disclose any use of submitted content for model training before enabling that use; we do not claim that third-party providers offer zero retention.

The optional Chrome extension adds analysis controls to YouTube and X pages. It reads page structure and post links locally to place those controls; it does not collect browsing history. A source is submitted to HowBullish only when you click Analyze. When you connect your account, a separate extension session is created. Access and rotating refresh credentials are stored locally in trusted extension storage, inaccessible to page content scripts, so your connection can survive browser restarts and extension updates. Recent analysis results remain in temporary session storage. You can disconnect in extension Settings to clear local credentials and request revocation of the extension session; uninstalling clears local extension data. Analysis uses your account credits and is saved to your account history. Selected text sent to the website is transferred in a URL fragment, cleared after import, and may be stored locally for up to 30 minutes during sign-in.

3. Service providers, cookies and international processing

Cloudflare hosts the website. Supabase provides beta authentication and account-owned analysis records, with our project in Singapore. OpenRouter and Meta processes text submitted for enabled beta analysis. These providers may process data outside your country. Video captions are read locally by the browser extension on the source page. Cloud caption retrieval and audio transcription are disabled. Captions selected for analysis are sent to HowBullish and OpenRouter and Meta to generate the results. Caption URLs and page cookies are not sent to a transcription provider.

If Paddle processes your purchase, its separate Privacy Notice explains its payment-related processing. If you choose Google sign-in, Google shares your basic profile, email address and account identifier with our authentication service. We request no access to your Gmail messages, Google Drive files or contacts. Resend delivers authentication emails and processes the recipient address, sign-in email content and delivery information. Sign-in links are sensitive and should not be shared.

Optional browser usage analytics are currently disabled. We do not enable session recordings or send submitted text, transcripts, source URLs, sign-in links, or email addresses to PostHog. Separately, we retain operational records of analysis and import status, duration, model token usage, and calculated service cost to operate and improve reliability. Minimal operational metrics use pseudonymous account identifiers and are summarized in PostHog. Calculated costs are distinct from invoice charges. Previously saved analytics preferences do not enable tracking while browser analytics are disabled. Authentication sessions and pending drafts use necessary browser storage; pending drafts expire after 30 minutes.

4. Retention and security

Beta analysis results and credit-use records are retained for your account; contact us to request deletion. We do not intentionally store the full pasted source in our application database, although quotes are included in saved results. Imported source URLs and full transcripts are stored in account-isolated records to resume and reuse imports. These records are removed on your next import after they become more than 24 hours old, or on account deletion. Provider logs and backups are subject to their own retention practices. Billing records may need to be retained to satisfy legal obligations.

We will apply access controls and appropriate technical safeguards for the production service. No online system can guarantee absolute security. Deleting an account may not remove records that must be retained by law; any such exceptions will be explained.

5. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete or obtain a copy of personal data, restrict or object to processing, withdraw consent and complain to a competent data protection authority. We may need to verify your identity before fulfilling a request.

The service is intended for adults aged 18 or over. If you believe a child has provided personal data, contact us so that the matter can be investigated. Send privacy requests to the contact below.

6. Contact and changes

Controller: Teamory Investment Limited
Registered address: Vistra Corporate Services Centre, Wickhams Cay II, Road Town, Tortola, VG1110, British Virgin Islands
Privacy email: howbullish@agentmail.to

We will update this policy when the service or data practices change, and provide additional notice for material changes where required.