Privacy Policy
Doxt Stock is a research and record-keeping tool. This page describes what we collect, why, and the controls you have. In one line: we collect the minimum needed to run the product, we never sell data, and we run no advertising trackers.
What we collect
- Account: email address and a salted password hash (scrypt). We never store your password in plain text. Email verification is optional at signup.
- Your choices: watchlist (the tickers you follow) and alert thresholds you set.
- Notifications: records of judgment-settlement, alert and invalidation emails sent to you, so the in-app panel can show them.
- Product analytics: anonymous usage events (page views, clicks, conversions) tied to a random identifier stored in your browser's local storage. Events contain no page content and no cross-site identifiers. If you are signed in, events are attributed to your account email so we can answer support requests.
- Session: a login token in local storage (not a cookie). No advertising or third-party tracking cookies are set.
What we do not do
- We do not sell or rent personal data. There is no ad network on this site.
- We do not collect brokerage connections, payment details on the web (in-app purchases are handled by Apple/Google), or your portfolio holdings.
- We do not use your data for automated profiling beyond product analytics described above.
Public by design
The public judgment ledger is, by design, public: model judgments, evidence and settlements are published and cannot be edited or deleted. Your account email, watchlist and personal records are not part of the public ledger.
Email controls
Every product email carries an Unsubscribe link that stops all judgment, settlement and alert emails for your account while keeping your account intact. You can also request full account deletion.
Your rights (GDPR/CCPA)
You can access and correct your data by signing in; delete your watchlist entries at any time; unsubscribe via any email footer; and request full account deletion (which removes your account, watchlist, alerts and notification records) by emailing contact@doxt.com. We respond within 30 days. Retention: account data is kept until deletion is requested; append-only public ledger records persist by design.
Processors
We use a small number of service providers to operate: market data (EODHD, Finnhub), email delivery (Brevo/SMTP), SEC EDGAR (public data), and our hosting provider. They process data only to deliver the service.
Changes
Material changes to this policy will be announced on the site before they take effect.