Privacy Policy

1. Who this covers

This policy explains what personal information Momentum Analyzer collects, why we keep it, and the choices you have. It covers the website, accounts, and hosted research tools, including a research client you connect with your account. Use of the product is also covered by the Terms & Conditions.

Questions go to [email protected].

2. Information you give us

When you create an account we store:

• Your username and email address. You can leave the username blank and we use the email address. An account that already has a username keeps it.
• Your password, stored only as a hash
• Your plan, trial end date, role, and account status
• Whether your email is verified, and a verification token until it is used
• A hashed password-reset token and its expiry, when you ask for a reset. The link works for one hour. The reset token itself is not logged.
• The time you accepted the terms
• The time and IP address of your last sign-in

If you email us, we keep that message so we can reply. Paid access is arranged by email. We do not collect payment card numbers.

If you continue with Gmail or Facebook, we store the email address that provider confirms and that provider's account id. We do not receive the Gmail or Facebook password, and we do not post to those accounts. When that email already belongs to an account, we sign in to that account and leave its username unchanged.

3. Information collected while you use the product

Each request to the site is logged so we can operate, secure, and debug the service. A log row can include the page or API path, the status and timing of the request, your account id, username, and role when you are signed in, your IP address, the country, region, and city supplied by our edge network, and your browser, referrer, and host. Query values that look like tokens, passwords, or API keys are removed before the row is stored. Cookies, authorization headers, and passwords are not written to this log.

When you use the hosted research tools, we also record the tool, the symbol, whether the call was allowed or limited, how much history was requested and served, and the client IP address. The research response itself is not stored in that usage log.

4. Cookies and storage in your browser

Signing in sets two cookies, access_token and refresh_token. They are HttpOnly and SameSite=Lax, and they are marked Secure when the site is served over HTTPS. The same tokens are also stored in this browser's local storage so the research pages can call the API. The access token expires after a short session. The refresh token lasts longer and is used to issue a new access token.

This browser also keeps your theme and chart display choices. A session flag remembers that the terms reminder was already shown during this sign-in. Signing out clears the tokens and preferences stored in local storage. The sign-in cookies expire on their own.

5. How we use personal information

• Create and protect your account, including email verification and password reset
• Decide which research your plan can open
• Send the messages you asked for, such as a verification or reset email
• Keep the service reliable, investigate abuse, and answer support mail

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use a third-party product-analytics service.

We don't use your personal information to train AI models.

Research only, not financial advice. Momentum Analyzer doesn't connect to brokers or place trades.

6. Who else processes it

These providers process information so the product can run:

• Cloudflare, when the site is served through it, processes connection data, including IP address, to deliver and protect the site.
• Our email provider delivers verification and password-reset messages to the address on the account.
• A research client you connect, such as Claude, Codex, Cursor, or Grok, receives the market research your account is allowed to read. That client does not receive your password.

When you connect an app, we store that sign-in only as a hash. The access token lasts 1 hour. The refresh token lasts 30 days. Momentum Analyzer never sees your chats. We see only the tool requests the app sends, such as the symbol and the research tool. You can disconnect an app at /account.

Market research is built on our servers. Symbol and market queries go to our market-data and model providers, currently including Massive, Alpha Vantage, and Anthropic. Those queries are not labeled with your name or email. The provider list can change as the product changes.

7. How long we keep it

Account information stays while the account is open. Password-reset tokens expire after one hour. Connected-app access tokens expire after 1 hour, and their refresh tokens expire after 30 days. Request logs and research-tool logs are kept for 90 days. Market prices and options history are not personal information and are kept on a separate schedule.

Email [email protected] to ask us to delete your account. We will delete or de-identify the account record unless we need to keep a specific item for security, fraud prevention, or a legal obligation.

8. Security

Passwords are hashed before they are stored. Sign-in cookies are HttpOnly. Request logs drop credentials before they are written. No method of transmission or storage is perfectly secure.

9. Your choices

You can review the username and email on your account from the signed-in profile page, sign out of this browser, and delete the account from Settings or from /account. A password account confirms with the current password. A Gmail or Facebook account confirms with the email address. Deleting the account removes it, revokes connected-app sign-ins, and clears the name on our logs. An admin account cannot be deleted from this page. You can also email us to ask for deletion.

If you remove Momentum Analyzer from Facebook, we drop the Facebook link and keep the account. You can sign in with Facebook again, or use Forgot password and set a password from the email on the account.

You can also control cookies in your browser. Blocking cookies will keep you from staying signed in.

If you live in California, you can ask us to tell you the categories of personal information we have collected, and you can ask us to delete it. We do not sell or share personal information as those terms are used in the California Consumer Privacy Act. You will not be treated differently for making a request.

The product is operated in the United States. If you use it from somewhere else, your information is processed in the United States.

10. Children

Momentum Analyzer is for people 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, email us and we will delete it.

11. Changes

When this policy changes, we will update this page and the date at the top. Continued use of Momentum Analyzer after the new date means the updated policy applies.