Privacy Policy

1. Who controls your information

SERN, an individual operator based in South Korea, controls personal information processed through Stocksembly. Privacy questions and requests may be sent to kicoa24@gmail.com.

2. Information we collect

• Account information, such as your email address, display name, authentication identifiers, and account preferences.
• Subscription and transaction information, such as plan, amount, payment status, billing country, and receipts. A payment provider may process card or bank details; SERN does not intend to store complete card numbers.
• Research content, including tickers, companies, prompts, research questions, generated reports, saved history, and feedback.
• Usage and technical information, including IP address, device and browser information, timestamps, viewed pages, feature interactions, crash data, and security logs.
• Cookie, analytics, and advertising attribution information used to remember preferences, understand product performance, and measure campaign conversions.
• Communications you send to support, privacy, or legal contacts.

3. Why we use information

• Create and secure accounts, authenticate users, and provide requested research.
• Store prompts and research history so users can revisit and continue their work.
• Process subscriptions, usage charges, cancellations, refunds, and required records.
• Operate, troubleshoot, measure, and improve Stocksembly and prevent fraud or misuse.
• Respond to requests, communicate service changes, and comply with legal obligations.
• Use analytics or advertising measurement cookies where consent or another valid legal basis is required.

4. Legal bases

Depending on your location and the purpose, processing may be necessary to perform a contract with you, comply with law, protect legitimate interests such as security and service improvement, or act on your consent. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

5. Prompt storage and AI processing

Stocksembly stores user prompts and research history to deliver persistent research files and related features. Prompts may be sent to infrastructure or AI service providers solely to perform the requested service, subject to appropriate contracts and safeguards.

Private prompts are not used to train general-purpose AI models without separate notice and an appropriate legal basis or consent. Do not submit sensitive personal information, confidential financial credentials, or information you are not authorized to disclose.

6. Cookies, analytics, and advertising measurement

With optional analytics consent, Google Analytics and Google Ads measure product actions and advertising conversions. For hosted checkout, Google Analytics client and session identifiers are included in payment-provider metadata. A verified successful payment may send the transaction identifier, actual amount, currency and plan to Google Analytics from our server. Google Ads receives imported conversion data through the linked Analytics property; personalized advertising is disabled for this link. We do not include email addresses, research questions, report text or payment credentials in these events.

Before an optional analytics choice, public pages send unlinked visit counts, coarse source-channel and screen-size categories, visible time and scroll-depth buckets through our server. This measurement does not use cookie or account identifiers, fingerprinting, raw URLs or prompt text. Each count receives an unrelated random event identifier; visitor IP addresses and browser headers are not forwarded to PostHog, and geolocation enrichment is disabled. Rejecting analytics, Global Privacy Control or Do Not Track stops this additional measurement. These counts cannot reconstruct an individual visitor's journey or determine unique visitors.

With optional analytics consent, PostHog (US cloud) receives pseudonymous account identifiers, campaign labels, page categories, engagement durations, product actions and confirmed subscription revenue. Session replay masks text, input values and element attributes; authentication, account and checkout pages, embedded payment frames, images and canvas are excluded from replay. Prompts, chat messages, email addresses and payment credentials are not intentionally sent. Select Analytics preferences to withdraw consent and stop future collection.

Stocksembly may use essential cookies for login, security, and preferences, analytics cookies to understand aggregate usage and product performance, and Meta Pixel, Conversions API, TikTok Pixel, or TikTok Events API data to measure advertising conversions. Advertising measurement may include pseudonymous identifiers, a hashed account identifier or email address, pages viewed, checkout activity, and purchase value. TikTok measurement uses consent-based click and browser identifiers, a hashed account identifier, and paid subscription value and currency. Where required, these non-essential tools remain off until you consent. You can change browser settings or use the service's cookie controls when available.

7. Service providers and disclosures

SERN may engage providers for hosting, authentication, AI processing, market and news data, payments, analytics, advertising measurement, customer support, and security. These providers include Meta and TikTok for consent-based advertising attribution. The production provider list and each provider's role will be published before those providers process personal information.

Information may also be disclosed where required by law, to protect users or the service, in connection with a business transfer, or at your direction. SERN does not sell personal information or share it with brokers for affiliate marketing.

8. International transfers

Some providers may process information outside South Korea or your country. Before any such transfer, Stocksembly will identify the recipient, country, purpose, categories, method, timing, retention period, and applicable safeguard or consent mechanism as required by law.

9. Retention and deletion

Account data and stored research are generally retained while the account is active and then deleted or de-identified after a valid deletion request, subject to backup cycles, security needs, unresolved disputes, and mandatory records.

Transaction, tax, consumer-contract, and security records are retained for the periods required by applicable law. Exact production retention periods will be published before launch. When retention ends, information is securely deleted or irreversibly de-identified.

10. Your rights

Depending on applicable law, you may request access, correction, deletion, suspension of processing, withdrawal of consent, or portability, and may object to certain processing. You may also close your account. We may need to verify your identity before completing a request.

To exercise a right, email kicoa24@gmail.com. You may also complain to the competent privacy authority in your jurisdiction.

11. Security and children

Stocksembly uses reasonable administrative, technical, and physical safeguards appropriate to the nature of the information. No system is completely secure, and users should protect their credentials.

Stocksembly is not directed to children who cannot lawfully consent to the service. If we learn that a child's information was collected without required authorization, we will take reasonable steps to delete it.

12. Changes and contact

This policy may change as the product, providers, or law changes. Material updates will be announced in the service or by another reasonable method before they take effect where required.

Privacy contact: SERN, kicoa24@gmail.com, Room 306, 32-4, Banryong-ro 18beon-gil, South Korea.