Privacy Policy

BullRecon provides stock discovery, visual company reports, watchlists, portfolio tools, market signals and AI-assisted research features. In this policy, “BullRecon,” “we,” “us” and “our” refer to the operator of the BullRecon service available at www.bullrecon.app.

This policy applies to the BullRecon website, application and related communications. For privacy questions or requests, contact privacy@bullrecon.app.

• Account information: email address, display name, account identifier, authentication provider and profile information you choose to provide.
• Google sign-in information: when you choose Google login, we receive the basic profile information needed to authenticate you, generally your name, email address, profile image and Google account identifier.
• Product content: watchlists, saved screens, manually entered portfolio transactions, community submissions, beta-code activity and preferences.
• AI interactions: prompts, selected stock context and feedback you submit to AI-assisted features.
• Subscription information: plan, entitlement, checkout status and billing identifiers. Payment providers process full payment-card details; BullRecon does not store full card numbers.
• Usage and technical information: pages viewed, feature interactions, approximate location derived from IP address, device/browser information, diagnostics, timestamps and security logs.
• Communications: information included when you contact us for support, feedback or privacy requests.

Portfolio entries are manually entered research data and are not connected to or verified against a brokerage account unless we clearly introduce and disclose such a feature in the future.

BullRecon uses Google OAuth only to let you create an account and sign in. We request the minimum standard identity scopes needed for authentication: OpenID, email and basic profile information.

• We use Google user data to authenticate you, create your BullRecon profile, secure your session and communicate about your account.
• We do not request access to Gmail, Google Drive, contacts, calendars or other Google product content.
• We do not sell Google user data or use it for targeted advertising.
• We share it only with service providers that process data for BullRecon, when required by law, or when you direct us to do so.

• Provide accounts, reports, watchlists, portfolio tools, billing and requested product functionality.
• Personalize and remember your workspace, access level and product preferences.
• Generate AI-assisted explanations and respond to your prompts.
• Measure product usage, diagnose errors and improve reliability and usability.
• Prevent fraud, abuse, unauthorized access and other security incidents.
• Send authentication, service, billing and support communications.
• Comply with legal obligations and enforce our Terms.

Depending on your location and the activity, we rely on performance of our contract with you, legitimate interests in operating and securing BullRecon, consent where required, and compliance with legal obligations.

We disclose information only as needed to operate BullRecon, complete a transaction, protect the service, comply with law, or with your direction. Our current provider categories include:

• Supabase for authentication and application data storage.
• Vercel, Railway and Cloudflare for application hosting, infrastructure, delivery and domain services.
• PostHog for product analytics and performance understanding.
• Lemon Squeezy and its payment partners for checkout, subscription administration, taxes and payment processing.
• Google when you choose Google sign-in.
• AI infrastructure providers used to generate requested AI-assisted research responses.
• Email delivery providers used for authentication and service messages.

We may also disclose information during a merger, financing, acquisition, reorganization or sale of assets, subject to appropriate confidentiality and applicable law. We do not sell personal information for money.

BullRecon uses browser storage and similar technologies to keep you signed in, remember recent stocks and screener state, maintain security, and understand product usage. PostHog may record product events and page interactions. You can limit browser storage through your browser settings, but essential product features may stop working correctly.

Where applicable law requires consent for non-essential analytics, we will request it before using those technologies. We do not use analytics information to provide personalized advertising.

We keep personal information only for as long as reasonably necessary to provide the service, secure accounts, maintain business and tax records, resolve disputes and meet legal obligations. Retention periods vary by data category and context.

You may request account deletion by contacting privacy@bullrecon.app. We will delete or anonymize eligible information, while retaining limited records where required for legal, fraud-prevention, security or accounting purposes. Removing Google access from your Google account does not automatically delete your BullRecon account.

BullRecon and its providers may process information in Türkiye, the United States, the European Economic Area and other countries. These countries may have different privacy laws. Where required, we use recognized safeguards for cross-border transfers and require providers to protect information consistently with applicable law.

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, and complain to a competent data-protection authority. Residents of Türkiye may also exercise rights available under Article 11 of Law No. 6698 (KVKK).

Send requests to privacy@bullrecon.app from the email associated with your account. We may verify your identity before completing a request. You may also designate an authorized representative where applicable law permits.

We use administrative, technical and organizational safeguards designed to protect personal information. No internet service can guarantee absolute security, so you should use a strong password and protect access to your account.

BullRecon is not directed to children under 18, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate and delete it where appropriate.

We may update this policy as BullRecon evolves. We will change the effective date and provide additional notice when a material change requires it. Continued use after an update is subject to the revised policy, where permitted by law.

Privacy questions, requests and complaints: privacy@bullrecon.app.