Privacy policy

What we collect

When you create an account, we store your email address and optional profile fields (display name, username, bio). Authentication — including the password hashing and session management — is handled by Supabase Auth; we never see your plaintext password. Stocks data (daily picks, watchlists, friend connections, group memberships) is associated with your Supabase user ID.

We also maintain an administrative account used solely for platform maintenance (configuration, monitoring, and support). Administrative access is restricted to the minimum needed to operate, secure, and support the service.

What we don't do

• We don't sell your data or share it for third-party advertising.
• We don't track you across other sites.
• We don't post on your behalf.
• We don't require linking a real-money brokerage account.

Third-party services

We use the following providers to run the product:

• Supabase— authentication + database hosting. Your email + hashed password live here. Subject to Supabase's privacy policy.
• Yahoo Finance, Financial Modeling Prep, and Finnhub — market data sources. We send symbol tickers (e.g., AAPL) to these services; never your personal data.
• Cerebras, Groq, OpenRouter, and Google Gemini — LLM providers used for AI-curated pick rationale (Cerebras and Groq first, OpenRouter and Gemini as fallbacks). We send only anonymized market context (ticker symbols, prices, and signals); your personal data is never included.
• Cloudflare + Oracle Cloud — hosting + edge network. They see standard request metadata (IP, user agent).

Your rights

You can delete your account at any time from /account. When you delete, we cascade-delete all data tied to your user ID (watchlists, friendships, group memberships, and any future alerts you set). Email us at contact@covelotech.com for anything else.

Depending on where you live (for example under GDPR or CCPA), you also have the right to access, correct, export, or object to the processing of your personal data, and to withdraw consent. Email us and we'll respond within about 30 days. We don't discriminate against you for exercising these rights.

Data retention

We keep your account data only for as long as your account exists. When you delete your account, the cascade-delete removes your data from the live database, and routine backups roll off on their normal cycle shortly after.

Age

TraderCove is intended for adults (18+) making their own decisions about financial information. It is not directed to children, and we do not knowingly collect personal data from anyone under 13.

Cookies

We use first-party cookies only for authentication — the Supabase session cookie (named sb-<project>-auth-token, sometimes split into numbered chunks). It is scoped to .tradercove.app so a single sign-in also covers our subdomains, and it expires after about 30 days. No advertising, analytics, or cross-site tracking cookies.

What other members can see

TraderCove has social features (friends, groups, shared watchlists). Once you sign in, other signed-in members can find you by searching your username or display name, and can see your username, display name, avatar, and bio. Watchlists you mark friends or public are visible to those audiences (their name, description, and the symbols on them); private watchlists stay yours alone. Anonymous visitors who are not signed in cannot browse member profiles.

Not investment advice

Everything on TraderCove — daily picks, news, analyst data, rationale text — is for information only. It is NOT investment advice and not a recommendation to buy or sell any security. Do your own research and consult a licensed professional before making investment decisions. You assume all risk for your own trading activity.