Privacy Policy
Stock Broker Analyser AI Agent — effective from launch, July 2026
What we collect
- Account data: email address and authentication credentials (shared with your mCoreBrain account, if you have one — same login, same underlying user record)
- Usage data: your selected country, login timestamps, and refresh-analysis requests
- Payment data: transaction records (amount, currency, status, date) for each paid refresh. Card details are handled entirely by our payment processor — we never see or store your card number
- Generated documents: any PDF analysis you download, and when you downloaded it
What we do not collect
- No name, phone number, or address — signup only asks for email and password
- No brokerage account details, holdings, or trading history — this service analyses public broker information, not your personal investments
- No card or bank details — entered directly into Stripe, never touch our servers
- We do not use your data to generate personalised financial recommendations
Payment & data security
Payments are processed entirely by Stripe, a PCI-DSS certified payment processor. Your card details are entered directly into Stripe's own secure form — they are never transmitted to or stored on our servers. We only ever see the result (paid / failed) and the amount.
Data storage uses Supabase (Postgres): all traffic is encrypted in transit (TLS), and every account's data is access-controlled at the database level (row-level security) so it can only ever be read by that account.
How it's used
Account and usage data operate the service and your dashboard. Payment data is used to process your refresh requests and for accounting/tax records. We do not sell your data or share it with third parties for marketing.
Legal basis & retention
Processing is based on contract performance (Art. 6(1)(b) GDPR) for account and payment data, and legitimate interest (Art. 6(1)(f) GDPR) for service usage analytics. Payment records are retained per German tax law retention requirements; account data is retained for the life of your account plus a reasonable period after closure.
Your rights
You have the right to access, rectify, erase, restrict, and port your data, and to object to processing. Contact info@mcorebrain.com. EU/EEA residents may lodge complaints with their national supervisory authority.
Infrastructure
Data is stored and processed via the same secure infrastructure as mCoreBrain (Supabase/Postgres, encrypted in transit and access-controlled per account), operated by the same party, but kept in its own dedicated tables separate from mCoreBrain's own product data.