Privacy Policy

WickScan ("we," "us," or "our") operates the wickscan.net website, the WickScan browser extensions, mobile applications, APIs, and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and, if you sign in with Google, the name and profile picture associated with your Google account. We do not store your Google password. If you link a Discord account for community access, we store your Discord user ID alongside your WickScan account.

1.2 Uploaded Charts & Analysis Results

When you submit a chart image for analysis — whether by uploading it on the website, capturing it with the browser extension, or scanning from the mobile app — we store the image and the analysis generated from it so that we can provide your scan history, annotated results, and related features. Uploaded images and analysis results are retained while your account is active (see Section 6) and are processed by the third-party AI providers described in Section 3.

To operate the Service efficiently, analysis results may be cached by image fingerprint. On the free plan this cache is shared: if two users submit an identical image, the second user may receive the analysis generated from the first user's submission. Do not upload images that contain personal, account, or confidential information — for example, crop out account balances, positions, and personal details before scanning.

If you use the scan chat assistant ("Ask Wick"), the messages you send and the responses generated are stored with the associated scan as part of your account data, are processed by the third-party AI providers described in Section 3, and may be reviewed by us to operate and improve the Service. Chat messages are retained and deleted on the same terms as your scan history (see Section 6).

1.3 Usage Data & Product Telemetry

We automatically collect certain information when you access the Service, including your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits. We also collect in-product event data — such as page views, scan starts and completions, feature interactions, and checkout steps — tied to your account, which we use to operate, debug, and improve the Service and to understand how features are used.

1.4 Payment Information

Payments are processed by Stripe, Inc. We do not store your credit card number or full payment details on our servers. Stripe may collect and store payment information in accordance with its own privacy policy. We retain a Stripe customer ID, subscription status, and billing history metadata to manage your account tier.

1.5 Cookies, Analytics & Attribution

We use essential cookies to maintain your authenticated session and preferences. We also set first-party attribution cookies (for up to 30 days) that record how you arrived at WickScan — such as the referring site and campaign parameters — so we can attribute signups.

We also set a first-party device identifier cookie used to enforce free-plan usage limits and to detect and prevent abuse of the Service. When a free-plan scan is requested, we record this identifier together with a salted, one-way hash of your IP address and browser user agent (the raw IP address is not stored for this purpose) and your approximate country, and we may link accounts that share a device or connection so that free-plan limits apply across them.

We use third-party analytics services to understand how the Service is used and to improve it: Google Analytics, Microsoft Clarity (which may record anonymized session interactions such as clicks, scrolls, and page movement), and Vercel Analytics. These providers may set their own cookies or identifiers and process usage data on our behalf, and may collect information about your online activities over time and across different websites when you use the Service. We do not use advertising networks or sell your data to advertisers.

1.6 Browser Extension & Mobile App

The WickScan browser extension captures a screenshot of the chart page you are viewing only when you explicitly trigger a scan, and transmits that image to our servers for analysis. The extension does not continuously monitor, collect, or transmit your browsing activity. The mobile app provides the same Service in an app wrapper and collects the same categories of data as the website.

2. How We Use Your Information

• To provide, operate, and maintain the Service
• To process your chart analysis requests, including through third-party AI providers
• To provide your scan history and related account features
• To manage your account, subscription, and usage limits
• To process payments and send billing-related communications
• To respond to customer support inquiries
• To detect, prevent, and address technical issues, fraud, and abuse (including circumvention of usage limits)
• To evaluate and improve analysis quality and develop new features, including using scans in de-identified or aggregated form
• To send you service and account emails, and — where permitted — product and marketing emails you can opt out of (see Section 7)

3. AI Processing of Uploaded Images

Chart analysis is performed using third-party AI model providers, currently including OpenAI, Google, and Anthropic. When you submit a scan, the chart image (and derived data such as detected tickers and price levels) is transmitted to one or more of these providers to generate the analysis. These providers process the data as service providers under their respective API terms; per those terms, API-submitted content is not used to train their publicly available models. The set of providers we use may change as we improve the Service.

Uploaded images are intended to contain market chart data only. Please do not include personal or sensitive information in scanned images.

4. How We Share Your Information

We do not sell your personal information. We share data with:

• Service providers — third-party companies that help us operate the Service, including Stripe (payments and payouts), Supabase (authentication, database, and file storage), Vercel (hosting and analytics), Resend (email delivery), the AI providers described in Section 3, market data providers, and the analytics services described in Section 1.5. These providers process data on our behalf to provide their services.
• Legal requirements — if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of WickScan, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), encrypted storage, hashed storage of API keys, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention & Deletion

We retain your account information, uploaded chart images, and analysis history for as long as your account is active, so that your scan history and results remain available to you. Event and analytics data is retained for as long as needed for the purposes described above.

You may request deletion of your account and associated personal data at any time by contacting us at the email below. Upon a verified request, we will cancel any active subscriptions and delete your account data — including your profile, scan history, uploaded images, and usage records — within 30 days, except where retention is required by law (for example, billing and tax records) or where data exists in routine encrypted backups that expire on a rolling basis. Cached analysis derived from de-identified image fingerprints may persist in aggregate form. Abuse-prevention signals and usage counters are retained after deletion in de-identified form to prevent misuse of free allowances.

7. Email Communications

We send transactional emails required to operate the Service (such as verification codes, billing notices, and security alerts). We may also send product and lifecycle emails — such as onboarding tips, feature announcements, scan-result notifications, and offers. Every marketing or lifecycle email includes an unsubscribe link, and you can opt out at any time without affecting transactional emails.

8. Your Rights

Depending on your location (including under GDPR and U.S. state privacy laws), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict the processing of your data
• Request portability of your data
• Withdraw consent at any time (where processing is based on consent)
• Not be discriminated against for exercising these rights

To exercise any of these rights, contact us at the email below. We will verify your request using the email address associated with your account and respond within the timeframe required by applicable law.

9. International Users

The Service is operated from the United States, and your information is processed and stored on servers in the United States (and in the regions used by our service providers). If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date, and may additionally notify you by email or in-app notice. Your continued use of the Service after any changes constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, or wish to exercise your privacy rights, please contact us at:

support@wickscan.net