Privacy policy

What we collect

When you create an account, we store your email address and optional profile fields (display name, username, bio). Authentication — including the password hashing and session management — is handled by Supabase Auth; we never see your plaintext password. Stocks data (daily picks, watchlists, friend connections, group memberships) is associated with your Supabase user ID.

We also maintain an administrative account used solely for platform maintenance (configuration, monitoring, and support). This account has no access to individual user data.

What we don't do

• We don't sell or share your data with third parties.
• We don't track you across other sites.
• We don't post on your behalf.
• We don't require linking a real-money brokerage account.

Third-party services

We use the following providers to run the product:

• Supabase— authentication + database hosting. Your email + hashed password live here. Subject to Supabase's privacy policy.
• Yahoo Finance + Financial Modeling Prep — market data sources. We send symbol tickers (e.g., AAPL) to these services; never your personal data.
• Cerebras, Google Gemini, and Groq — LLM providers used for AI-curated pick rationale (Cerebras as primary, Gemini and Groq as fallbacks). We send only anonymized market context (ticker symbols, prices, and signals); your personal data is never included.
• Cloudflare + Oracle Cloud — hosting + edge network. They see standard request metadata (IP, user agent).

Your rights

You can delete your account at any time from /account. When you delete, we cascade-delete all data tied to your user ID (watchlists, friendships, group memberships, and any future alerts you set). Email us at contact@covelotech.com for anything else.

Depending on where you live (for example under GDPR or CCPA), you also have the right to access, correct, export, or object to the processing of your personal data, and to withdraw consent. Email us and we'll respond within about 30 days. We don't discriminate against you for exercising these rights.

Data retention

We keep your account data only for as long as your account exists. When you delete your account, the cascade-delete removes your data from the live database, and routine backups roll off on their normal cycle shortly after.

Age

TraderCove is intended for adults (18+) making their own decisions about financial information. It is not directed to children, and we do not knowingly collect personal data from anyone under 13.

Cookies

We use first-party cookies for authentication (Supabase session) and CSRF protection. No advertising or analytics cookies.

Not investment advice

Everything on TraderCove — daily picks, news, analyst data, rationale text — is for information only. It is NOT investment advice and not a recommendation to buy or sell any security. Do your own research and consult a licensed professional before making investment decisions. You assume all risk for your own trading activity.