Privacy Policy

Effective date: October 1, 2026

This Privacy Policy explains what information BreakoutScan (“we”, “us”) collects when you use breakoutscan.com and app.breakoutscan.com (the “Service”), how we use it, and the choices you have. By using the Service you agree to this Policy.

1. Information We Collect

Account information. Your name, email address, and a hashed password when you create an account.
Billing information. Payments are processed by Stripe. We store your subscription status and a card fingerprint used to enforce our one-trial-per-card policy, and we read your plan and card details (brand, last four digits, expiry) from Stripe when we show them to you. Your full card number never touches our servers.
Product data you create. Watchlists, saved presets, preferences, and similar settings tied to your account.
Alerts. The in-app alerts we show you about the stocks on your watchlists, when you saw or opened each one, and your alert switches.
Usage data. Pages viewed and features used (e.g. which tools you open), collected with a first-party identifier to understand product usage. We do not use third-party advertising trackers.
Technical data. IP address and the approximate location it indicates (city, region, country), browser and device information, and logs generated in the normal operation of the Service (including error reports).
Support communications. Messages you send to support, and the email address you send them from.

2. How We Use Information

To provide, operate, and secure the Service, including authentication and session management.
To process subscriptions, trials, and payments, and to prevent trial and billing abuse.
To send email: trial reminders, account and billing notices, the morning email, and alerts about your watchlists.
To understand how the product is used and improve it.
To monitor for, prevent, and investigate fraud, abuse, and security incidents.
To comply with legal obligations.

We do not sell your personal information, and we do not share it with third parties for their advertising.

3. Service Providers

We use a small set of infrastructure providers to run the Service, each of which processes data only as needed to provide their function to us: cloud hosting and content delivery, database and authentication, payment processing (Stripe), transactional email, caching, error monitoring, and bot protection on our sign-up and sign-in forms (Cloudflare Turnstile, which checks browser signals to tell people from automated traffic). These providers are bound by their own security and privacy obligations. Market data displayed in the Service comes from third-party data vendors and public regulatory sources; your personal information is not shared with them.

The AI assistant sends the messages you type to it, recent messages in the same conversation, and the market and account data needed to answer (for example, the names of your watchlists and the tickers on them) to a third-party model provider, DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.), including when an answer searches the web. DeepSeek’s terms permit it to use API inputs to improve its services, and it processes data on servers in the People’s Republic of China. We never send your name, email address, payment details, or account identifiers to a model provider. Please do not enter personal information into the assistant that you do not want processed this way.

4. Cookies

The Service uses cookies that are necessary for it to function: authentication/session cookies (keeping you signed in), a session identifier used to enforce single-active-session access, and a first-party identifier used for product analytics (linked to your account once you sign in). On the sign-up page and in the Payment methods window, Stripe’s script sets its own fraud-prevention cookies. We do not use third-party advertising cookies. You can clear cookies in your browser, but the Service will not function while signed out.

5. Retention

We keep account information for as long as your account exists. If you ask us to delete your account, we delete or anonymize your personal information within a reasonable period, except where we must retain records for legal, billing, or fraud-prevention purposes (for example, records of trial redemptions and payments). Aggregated or anonymized data that no longer identifies you may be retained. AI assistant conversations are kept for up to 90 days so you can revisit them; the usage records behind AI credits are kept as billing records. In-app alerts are kept for 30 days.

6. Security

We protect your information with industry-standard measures: encryption in transit, hashed passwords, row-level access controls on our database, secrets management, and least- privilege access. No system is perfectly secure; if we learn of a breach affecting your personal information we will notify you as required by law.

7. Your Rights and Choices

Access, correction, deletion. You can change your payment method in the app (Account → Payment methods) and your password through “Forgot password?” on the sign-in page. To change your name or email, request a copy of your data, or delete your account, email support@breakoutscan.com.
In-app alerts. Each kind of alert can be switched off on the Alerts page. Turning on sound and desktop notifications is a choice remembered in that browser only, and you can turn them off again on the Alerts page. Desktop notifications also need a permission your browser holds: you can withdraw it at any time in your browser’s site settings for BreakoutScan, which stops the notifications but not the sound.
Email choices. The morning email and watchlist alerts are on for members, and each carries an unsubscribe link; account and billing emails are sent as long as you have an account.
Depending on where you live, you may have additional rights under local privacy law (such as GDPR or CCPA/CPRA); we will honor valid requests as those laws require.

8. Children

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

9. International Transfers

Our infrastructure providers operate in the United States (and may process data in other countries). By using the Service you understand your information may be processed outside your own jurisdiction, protected by the safeguards described in this Policy.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced in the Service or by email, and the “Effective date” above will be updated.

11. Contact

Privacy questions or requests: support@breakoutscan.com.