Privacy Policy

Last updated: May 10, 2026

1. Introduction

JL Research (“we,” “us,” or “our”) operates the web application at stocks.jlsoftware.co (the “Service”). This Privacy Policy describes how we collect, use, store, and protect your information when you use our Service.

JL Research is operated by JL Software. Our registered contact for privacy matters is privacy@jlsoftware.co.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address for authentication purposes.

2.2 Financial Data (via Plaid)

If you choose to connect a brokerage account, we use Plaid Inc. (“Plaid”) to securely access your investment holdings data. Through Plaid, we receive:

  • Ticker symbols and security names
  • Share quantities and cost basis
  • Current market prices
  • Account identifiers (not account numbers or login credentials)

We do not receive, store, or have access to your brokerage login credentials (username or password). Plaid handles all authentication directly with your financial institution.

2.3 Research Data

When you generate research reports, we store the ticker symbol, generated report content, and associated metadata (rating, price target, etc.) linked to your account.

2.4 Usage Data

We collect anonymous analytics data (page views, feature usage) via Google Analytics to improve the Service. No personally identifiable financial data is sent to analytics providers.

3. How We Use Your Information

  • To provide and maintain the Service (portfolio tracking, research generation)
  • To authenticate your identity and protect your account
  • To process billing and subscription management via Stripe
  • To sync your brokerage holdings via Plaid when you authorize it
  • To improve the Service based on aggregate usage patterns

4. Data Storage and Security

  • All data is stored in Supabase (PostgreSQL) with row-level security (RLS) ensuring users can only access their own data
  • Plaid access tokens are encrypted at rest using PGP symmetric encryption (pgp_sym_encrypt)
  • All data transmission uses TLS 1.2+ encryption (HTTPS)
  • Authentication is handled via Supabase Auth with passwordless (magic link) verification
  • Payment processing is handled by Stripe — we do not store credit card numbers
  • Our infrastructure providers (Vercel, Supabase) maintain SOC 2 Type II compliance

5. Third-Party Services

We use the following third-party services that may process your data:

  • Plaid Inc. — Brokerage account connectivity. Subject to Plaid's Privacy Policy
  • Stripe Inc. — Payment processing. Subject to Stripe's Privacy Policy
  • Supabase Inc. — Database and authentication infrastructure
  • Vercel Inc. — Application hosting
  • Anthropic — AI-powered research generation (no personal financial data is sent to Anthropic)
  • Google Analytics — Anonymous usage analytics

6. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

  • All personal data, research reports, portfolio data, and holdings are permanently deleted within 30 days
  • Plaid access tokens are immediately revoked and encrypted records are deleted
  • Stripe customer records are retained per Stripe's policies for legal/compliance purposes
  • Anonymous, aggregated analytics data may be retained indefinitely

7. Your Rights

You have the right to:

  • Access your personal data stored in the Service
  • Request deletion of your account and all associated data
  • Disconnect brokerage accounts at any time (revoking Plaid access)
  • Export your portfolio and research data
  • Opt out of non-essential analytics tracking

To exercise any of these rights, contact us at privacy@jlsoftware.co.

8. Data Sharing

We do not sell, rent, or share your personal or financial data with third parties for marketing purposes. We only share data with the third-party service providers listed above, solely for the purpose of operating the Service.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The “Last updated” date at the top reflects the most recent revision.

11. Contact

For privacy-related inquiries, contact:
JL Software
Email: privacy@jlsoftware.co