Privacy Policy

1. Overview

Odalite ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use the Odalite platform. By using our Service, you consent to the practices described in this policy.

2. Data We Collect

We collect the following categories of data:

Account Information

• Email address (used for login and communications)
• Display name (optional, set by you)
• Authentication tokens (managed by Supabase)

Portfolio Data

• Stock symbols, share quantities, and purchase prices you enter
• Dividend income records and payment history
• Portfolio goals and financial targets you set

Usage Analytics

• Pages visited and features used (via Google Analytics)
• Browser type, device type, and country (anonymized)
• Session duration and interaction patterns

We do not collect payment card details. All payment information is handled directly by Paddle as the Merchant of Record.

3. How We Use Your Data

• To provide and maintain the Odalite Service
• To authenticate you and secure your account
• To display your portfolio data and generate analytics
• To process subscription payments via Paddle
• To send transactional emails (subscription confirmations, password resets)
• To improve the Service based on aggregated usage patterns
• To comply with legal obligations

4. Data Sharing & Third Parties

We share data with the following trusted service providers:

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your account and associated data
• Portability: Export your portfolio data in a machine-readable format
• Objection: Object to processing for marketing purposes
• Restriction: Request we restrict processing of your data

To exercise any of these rights, please contact us through the contact form on our website. We will respond within 30 days.

6. Cookies

We use the following types of cookies:

• Essential cookies: Required for authentication and session management
• Analytics cookies: Google Analytics (can be blocked via browser settings or extensions)

We do not use advertising or tracking cookies. You can disable analytics cookies by using a browser extension such as uBlock Origin or by enabling "Do Not Track" in your browser settings.

7. Data Retention

We retain your data as follows:

• Active accounts: data retained while your account is active
• After account deletion: data permanently deleted within 30 days
• Payment records: retained for 7 years as required by tax law (held by Paddle)
• Server logs: retained for 30 days then automatically purged

8. Security

We implement industry-standard security measures including TLS encryption for data in transit, AES-256 encryption for data at rest (via Supabase), row-level security policies on all database tables, and regular security reviews. However, no system is completely secure and we cannot guarantee absolute security of your data.

9. International Transfers

Your data may be processed in countries outside your jurisdiction. Our service providers (Supabase, Vercel, Paddle) are located in the US and EU and maintain appropriate data protection standards including GDPR compliance where applicable.