Legal
Privacy Policy
Last updated: February 18, 2026
Key Points (not a substitute for the full policy):
- We do not sell your personal information — ever
- Login is handled by Clerk (phone-based). Payments by Stripe. We never store your password or full card number.
- AI providers receive only public financial data about companies, not your personal information
- You can request deletion of your data at any time
- Questions? Email support@stockvaluefinder.ai
AI Forge LLC, a Wyoming limited liability company doing business as Stock Value Finder ("we," "us," or "our"), operates the website and application at stockvaluefinder.ai and app.stockvaluefinder.ai (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data.
The short version: We do not sell your personal information. We do not rent it out. We share data with third-party service providers only as necessary to operate the Service, and for no other purpose.
1. Information We Collect
Account Information. When you create an account, our authentication provider (Clerk) collects your phone number and, optionally, your email address. We do not store your password — authentication is handled entirely by Clerk via one-time passcodes. Your phone number is used solely for account authentication. We do not use your phone number to send marketing messages. By providing your phone number, you authorize AI Forge LLC (d/b/a Stock Value Finder) and its authentication provider, Clerk, to send you one-time passcodes via SMS for account verification. Message frequency varies. Standard message and data rates may apply. Consent is not a condition of purchase.
Payment Information. If you subscribe to a paid plan, payment processing is handled by Stripe. Stripe collects your payment method details (e.g., credit card number, billing address). We do not receive or store your full payment card information. We receive only a confirmation of payment status, subscription details, and a truncated card identifier from Stripe.
Usage Information. We collect basic information about how you use the Service, including pages viewed, stocks searched, and features used. This information is used solely to improve the Service and is not shared with advertisers.
Device and Technical Information. We automatically collect standard technical data such as your IP address, browser type, operating system, and referring URL. This data is used for security, diagnostics, and service improvement.
2. How We Use Your Information
We use the information we collect for the following purposes and no others:
- Provide and operate the Service — authenticate your account, process payments, deliver stock analysis
- Improve the Service — understand usage patterns, fix bugs, develop new features
- Communicate with you — send transactional emails (payment receipts, account notifications), respond to support inquiries
- Maintain security — detect and prevent fraud, abuse, and unauthorized access
- Comply with legal obligations — respond to lawful requests from law enforcement or regulators as required by applicable law
3. We Do Not Sell Your Information
We do not sell, rent, trade, or otherwise disclose your personal information to third parties for their marketing or commercial purposes. Period.
We do not participate in data broker networks, advertising exchanges, or any other arrangement that involves monetizing your personal data. This applies to all users, regardless of location.
4. Third-Party Service Providers
We use third-party service providers solely to operate and deliver the Service. Where these providers act as data processors on our behalf (Cloudflare, AI providers), they are contractually prohibited from using your information for any purpose other than providing their service to us. Clerk and Stripe operate as independent data controllers for authentication and payment data, respectively, and are governed by their own privacy policies.
Authentication:
- Clerk — handles account creation, login, and session management. Receives your phone number and/or email address. As an independent controller, Clerk's handling of your data is governed by Clerk's Privacy Policy.
Payment Processing:
- Stripe — handles subscription billing and payment processing. Receives your payment method and billing information. See Stripe's Privacy Policy.
AI Analysis:
- Anthropic, OpenAI, Google, xAI, and Groq — process financial data to generate stock analysis. These providers receive publicly available financial data about companies (such as stock prices, SEC filings, and earnings reports), not your personal information. No personal data is sent to AI providers. Our agreements with AI providers prohibit the use of data we send them for model training. No personal data is included in these transmissions.
Infrastructure:
- Cloudflare — provides CDN, DNS, and security services. May process your IP address and request metadata for security and performance purposes. See Cloudflare's Privacy Policy.
5. Data Retention
We retain your account information for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law (e.g., billing and transaction records are retained for up to seven (7) years as required by applicable tax and financial recordkeeping laws). Watchlist data and usage information associated with your account are deleted within 30 days of account deletion.
Usage and technical logs are retained for up to 90 days for security and diagnostic purposes, after which they are deleted.
If you submit a deletion request under Section 9, the same retention periods above apply.
6. Data Security
We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS/HTTPS), access controls, and infrastructure hosted on dedicated servers with restricted access.
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.
In the event we discover a security breach that affects your personal information, we will notify you within 72 hours of discovery, to the extent required by applicable law, using the email address associated with your account, or if no email is on file, by posting a prominent notice on the Service.
If we become aware that a third-party provider we use has experienced a security breach that may affect your personal information, we will notify you within 72 hours of becoming aware, using the contact method described above, and take appropriate steps to assess and mitigate the impact.
7. Cookies and Tracking
The Service uses cookies and similar technologies strictly for functional purposes:
- Session cookies — to maintain your authenticated session
- Preference cookies — to remember your settings
We do not use advertising cookies, tracking pixels, or third-party analytics services that track you across other websites. We do not participate in cross-site behavioral advertising. We do not respond to Do Not Track (DNT) browser signals, as there is no industry standard for compliance; however, we honor Global Privacy Control (GPC) signals as described in Section 10.
8. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you
- Correction — request correction of inaccurate personal information
- Deletion — request deletion of your personal information
- Portability — request a machine-readable copy of your data
- Opt-out of sale or sharing — we do not sell or share personal information for advertising or commercial purposes
- Opt-out of profiling — our Service provides informational analysis about publicly traded companies and does not use automated processing to make decisions about you that produce legal or similarly significant effects
To exercise any of these rights, contact us at support@stockvaluefinder.ai. We will respond within 45 days, extendable by an additional 45 days where reasonably necessary, or such shorter period as required by applicable law.
You may designate an authorized agent to submit a rights request on your behalf. We may require written proof of the agent's authorization and may verify your identity directly before processing the request.
To protect your information, we verify your identity before processing access or deletion requests by sending a one-time passcode to the phone number associated with your account. If you no longer have access to that phone number, contact us and we will work with you on an alternative verification method.
If we deny your request, we will provide an explanation of our reasons. You may appeal a denial by contacting us at support@stockvaluefinder.ai. We will respond to appeals within 60 days.
10. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you additional rights:
- Right to Know — you may request the categories and specific pieces of personal information we have collected about you in the preceding 12 months
- Right to Delete — you may request deletion of your personal information, subject to certain exceptions
- Right to Non-Discrimination — we will not discriminate against you for exercising your privacy rights
- Right to Opt-Out of Sale or Sharing — we do not sell or share personal information for cross-context behavioral advertising as defined under the CCPA/CPRA
- Right to Correct — you may request correction of inaccurate personal information
Categories of information collected: Identifiers (phone number, email), commercial information (subscription status), and internet activity (usage data). Categories sold: None. Categories shared for business purposes: Identifiers shared with Clerk (auth), Stripe (billing), and Cloudflare (security) — solely to operate the Service. AI providers are omitted from this list because they receive only publicly available financial data about companies, not personal information about you.
We do not sell or share personal information for cross-context behavioral advertising. We recognize Global Privacy Control (GPC) and similar universal opt-out signals. Because we do not engage in the sale or sharing of personal information, no data practices change in response to such signals, but we receive and respect them. If our practices ever change, we will fully comply with all applicable opt-out signal requirements.
We do not collect sensitive personal information as defined under the CCPA/CPRA or analogous state laws, other than subscription and billing status processed solely to provide the Service. We do not use this information for purposes that would require your opt-in consent under applicable law.
Both free and paid tiers of the Service collect the same categories of personal information. The difference between tiers is feature access, not data collection. Our free tier does not constitute a financial incentive program under Cal. Civ. Code § 1798.125.
11. International Users
The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.
By using the Service, you consent to the transfer of your information to the United States. If you are a resident of the European Economic Area (EEA), United Kingdom, or other jurisdiction with data transfer restrictions, please be aware that your data may not receive the same level of protection as under your local laws.
All stock analysis, fair value estimates, and quality grades provided by the Service are generated by automated AI systems for informational purposes only. These outputs do not constitute automated decisions with legal or similarly significant effects on you, and you retain full discretion over any investment decisions.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a revised "Last updated" date.
Your continued use of the Service after changes to this Privacy Policy constitutes acceptance of the updated policy. We encourage you to review this page periodically.
13. Contact Information
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
Email: support@stockvaluefinder.ai
Website: stockvaluefinder.ai/contact