Privacy policy

01

Who we are and what this covers.

Who we are

StockClub is made by Bolewood Group LLC. This policy covers the StockClub web app and this website. If you have a question about anything here, write to privacy@stockclub.io and a person will answer.

We are a small company. We collect what the app needs to work and nothing we can't explain in a sentence.

02

What we collect.

What we collect

• Your account. Your name, email address, and the club you belong to. That's how we know who to let in and who to email.
• What your club writes. The holdings you enter and the theses, assumptions, notes and votes your members add. This is your club's content; we store it so the app can show it back to you.
• Basic usage information. Device type, app version, and error reports, so we can fix what breaks.
• This website. Which pages you open, which buttons you click, and whether you submit the request-access form. If you arrived from a campaign, we keep the conventional tags in the address — source, medium, campaign, content, term, and the usual ad click IDs — so we can tell which ad or email sent you here. We do not send the contents of the form (your name, email, club name, or anything you type) to analytics.
• What you send us. Anything in a request-access form or a support email.

We do not connect to your brokerage. We never ask for account numbers, Social Security numbers, or login details for any financial institution — if something ever asks you for those in our name, it isn't us.

03

How it gets used.

How we use it

To run the app: to show your club its theses, to gather news and earnings-call material about the names you own, to produce the summaries and thesis checks the app is for, and to send the occasional message about your account.

To understand this website and the app: we use first-party product and marketing analytics (PostHog) to see which pages and buttons work, whether people request access, and which campaigns brought them. We do not identify anonymous visitors as people, we do not record your session, and we do not run advertising pixels. Campaign tags stay with us so we can measure our own ads; we do not share this information with advertisers.

We do not sell your information. We do not share it with advertisers, and we don't run advertising in the app.

04

Who else sees it.

Who else sees it

Your club. Everything your club writes is visible to the members of that club. Clubs are private and invite-only; members of one club cannot see another club's content, and there is no public profile or feed.

Service providers. A small number of companies help us operate: hosting and database providers, market-data and news providers, email delivery, error monitoring, product and marketing analytics, payment processing, and the AI providers whose models generate the news and earnings-call analysis. They handle your information only to provide their service to us, under contract.

Nobody else — unless the law requires it, or we're ever part of a merger or sale, in which case we'll tell you before your information moves.

05

Keeping and deleting.

How long we keep it, and how to get rid of it

We keep your club's content while the club has an account, because the point of the app is remembering what you thought in 2024. When a club closes its account, we delete its content within 30 days, apart from anything we're required to keep for tax or legal reasons.

You can ask us at any time for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email privacy@stockclub.io and we'll take care of it. Depending on where you live, you may have additional rights under your local law; we honor those requests the same way.

06

Security, children, changes.

Security, children, and changes

Your club's content is encrypted in transit and at rest, and access inside our company is limited to the people who need it to support you. No system is perfect, but we treat your club's thinking as private material.

StockClub is not for anyone under 18, and we don't knowingly collect information from children.

If we change this policy, we'll update the date at the top and, for anything significant, email account holders before it takes effect.

The analytics tool keeps a first-party cookie and a little local storage so the same browser can be recognized if you come back, or if you later sign in to the app. That is how campaign attribution and anonymous visitor continuity work in PostHog; cookieless mode would drop them. A browser add-on can block the analytics script; the site still works.