invtiming.com Privacy Policy

Effective date: October 26, 2026

1. Who we are

invtiming.com is a sole proprietorship in the Republic of Korea, represented by MinJi Cho. We are responsible for the personal information described in this policy. Contact: support@invtiming.com.

2. Information we collect

a) Account information. your email address and password. Your password is stored by our authentication provider in hashed form, so we cannot see it. If you sign in with Google, we receive the email address and basic profile details that Google shares with us. If you sign in with Facebook, we receive the email address and basic profile details (your name and profile picture) that Facebook shares with us. We do not receive your Facebook password, and we do not post to Facebook.

b) Information you enter. tickers in your Watchlist and My Portfolio (including quantities, prices and folder names), trades and notes in Trade History, Report Picks, and your language and display settings.

c) Usage information. which tickers you look up in Signal Analyzer and on which day (to apply daily plan limits), which reports you have opened (to show what is read and unread), and your plan history (trial, subscription and any access we grant).

d) Country. when you sign up, and at most once a day when you use the service, we work out your country (a two-letter code such as "US") from your IP address using a database stored on our own server. We save only the country code. Our application does not save your IP address in our database or application logs. Our web server keeps standard access logs, which include IP addresses, for security and troubleshooting, for up to 14 days.

e) Payment information. payments are handled by our payment provider, our merchant of record. We receive order details such as your plan, amount, date, country and order status, but not your full card number.

f) Messages. if you contact us by email or through Help & Support in the service, we keep your message, any files you attach, and our reply.

We do not use advertising or analytics trackers, and we do not sell or rent your personal information.

3. How we use it

• to provide the service, including personalized features such as Watchlist, My Portfolio and Portfolio Briefing;
• to apply plan limits, run trials and manage subscriptions;
• to keep the service secure and prevent abuse, including limiting the free trial to one per person;
• to operate and improve the service using aggregate statistics, such as the number of members by plan and by country;
• to send account and service emails, such as sign-up confirmation and password reset; and
• to comply with legal obligations.

Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running a secure service, compliance with legal obligations, and your consent where required.

4. Who processes data for us

We share personal information only with providers that help us run invtiming.com:

• Supabase: sign-in and our database (account, the information you enter, usage records, support messages and attached files).
• Resend: delivery of account emails, such as sign-up confirmation and password reset, and notices that we have replied to your inquiry.
• Google Workspace: our business email (support@invtiming.com), used when you write to us and when we reply.
• Oracle Cloud Infrastructure: server hosting, including web server logs.
• Our payment provider: payments, billing, taxes and refunds.
• Anthropic: AI that helps write reports and summaries, and translates support messages between you and our team. For reports, we send ticker symbols, market data and news. To translate a support message, we send its subject and text, with email addresses and long numbers removed first. We do not send your email address, your name or any files you attach.
• Google: sign-in with Google, if you choose it. Our pages also load fonts from Google Fonts and code libraries from jsDelivr, which receive your IP address as part of delivering those files.
• Meta (Facebook): sign-in with Facebook, if you choose it.

Requests we send to market data sources contain ticker symbols, not your personal information. Operational alerts we send to ourselves contain counts only, not personal information.

5. International transfers

Our providers may process information in countries other than your own, including the United States and the Republic of Korea. We rely on our providers' safeguards for these transfers.

6. How long we keep it

• While your account is open, we keep your account information and the information you enter.
• Support messages and our replies are kept while your account is open and are deleted when you delete your account. Files attached to a support message are deleted 90 days after the inquiry is closed.
• When you delete your account, we delete your account and the information linked to it. We keep only a one-way hash of your email address (a code that cannot be turned back into your email) to prevent repeat free trials.
• Payment records are kept by our payment provider and, where required by tax law, by us for the required period.
• Web server logs are kept for up to 14 days.

7. Your choices and rights

You can view and update your information in the service. You can delete your account in Account Settings. You will be asked to confirm it's you — with your password, or by signing in again with Google or Facebook — and to type DELETE.

If you signed in with Facebook, you can also remove invtiming.com in your Facebook settings (Settings & privacy › Apps and websites). This stops Facebook from sharing new information with us, but it does not delete your invtiming.com account. To delete your account and its data, use Account Settings or email us.

You can also email us to access, correct or delete your personal information, or to object to certain uses. Depending on where you live, you may have further rights under local law. We will reply within 30 days. We will not treat you differently for exercising your rights.

8. Cookies and browser storage

We use your browser's storage to keep you signed in (including the optional 30-day "keep me signed in" setting), to sign you out after inactivity, and to remember settings such as theme and language. We do not use advertising cookies.

9. Security

We use encrypted connections (HTTPS), access controls and database rules that let each member read only their own records. No method of storage or transmission is completely secure, but we work to protect your information.

10. Children

invtiming.com is not intended for anyone under 18, and we do not knowingly collect information from children.

11. Changes to this policy

We may update this policy. We will post the new version with a new effective date and tell you about material changes by email or in the service.

12. Contact

invtiming.com · support@invtiming.com

IP geolocation by DB-IP (https://db-ip.com), licensed under CC BY 4.0.