Information we collect
- Account data: email address, account identifier, and any profile information you provide.
- App data: watchlists, portfolios, price alerts, saved comparisons, preferences, and support requests.
- Subscription data: subscription status and purchase entitlement. Payment-card details are handled by the relevant app store and are not stored by us.
- Device and notification data: a push-notification token only after you grant notification permission and register for alerts.
- AI Copilot content: messages you submit and the app data needed to answer a request, such as relevant portfolio, watchlist, or alert data.
- Technical data: limited operational data such as browser/app version, route, and error details needed to maintain security and reliability. We do not use advertising IDs or collect precise location.
How we use it
- Provide accounts, market-data features, saved content, alerts, and customer support.
- Process and verify subscriptions, prevent fraud, and secure the service.
- Generate AI Copilot responses when you choose to use that feature.
- Diagnose outages and improve reliability. We do not sell personal information or use it for interest-based advertising.
Service providers and sharing
We share data only as needed to operate the service or where required by law. Our providers may include:
- Supabase for authentication, database, server functions, and secure storage.
- RevenueCat and the app stores for subscription entitlement and purchase processing.
- Firebase Cloud Messaging to deliver notifications when you opt in.
- AI service providers for AI Copilot requests you submit.
- Market-data and news providers to deliver requested market information; these requests are not sent with your account profile.
We do not sell or share personal information for cross-context behavioral advertising.
Security and retention
We use access controls, encrypted transport (HTTPS/TLS), database row-level security, and restricted server-side credentials to protect data. No security measure is absolute, and we do not claim end-to-end encryption or a certification unless explicitly stated elsewhere.
We retain account and app data while your account is active. When you delete your account, we delete the account and associated application data, subject to limited retention required for legal, security, fraud-prevention, or transaction-record obligations.
Your choices and rights
- Update account information in the app where available.
- Disable push notifications in your device settings.
- Delete your account from Delete account. Cancel an active app-store subscription before deletion.
- Request access, correction, export, restriction, objection, or deletion by emailing support@commodityhub.com. Depending on your location, you may also have the right to lodge a complaint with your data-protection authority.
International transfers and children
Our providers may process data in countries other than yours. We use appropriate safeguards where required. Commodity Hub is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information.
Contact and changes
Commodity Hub is the controller for the personal data described here. For privacy questions or requests, contact support@commodityhub.com. We will post any material changes on this page and update the effective date above.