← Back to GemPulse

Privacy Policy

Last updated: September 25, 2026

1. Who We Are

GemPulse Technologies Inc. ("GemPulse," "we," "us," or "our") operates the GemPulse trading intelligence platform at app.gempulse.io and the website at gempulse.io. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

We are transparent about what we collect. Here is a complete list:

Account Information

  • Email address — used to create and authenticate your account, send your login details, and communicate important service updates
  • Name (provided at signup) — used to personalize your experience and your emails
  • Membership tier — the early-adopter tier recorded when you join (e.g. Beta or Founder), used to honour early-adopter pricing
  • Hashed password — stored as a one-way bcrypt hash; we cannot read your plaintext password

Activity & Platform Data

  • Watchlist tickers — the stock symbols you add to your personal watchlist are stored in our database and associated with your account
  • Portfolio data — holdings and transactions you enter (tickers, quantities, prices, dates, cash balances, dividends, and portfolio names) are stored in our database linked to your account
  • Alerts and preferences — price alerts, gap-scanner filters, email preferences, and app settings you choose
  • Risk profile preference — your selected risk profile (Conservative / Moderate / Aggressive) is stored to personalize your scores
  • Login timestamps — we log the time of each login for security and audit purposes

Technical & Security Data

  • IP address and approximate country — logged at signup, at login, and when requesting a password reset; used for security purposes (detecting unauthorized access, abuse prevention, rate limiting)
  • User agent / device type — collected from HTTP headers for diagnostics and to improve mobile/desktop compatibility

Signups, Newsletter & Marketing

  • Signup details — name, email, and whether you opted in to marketing email, submitted via the signup form on gempulse.io or in the app
  • How you found us — if you arrive from a link or ad that carries campaign tags (e.g. utm_source, utm_campaign) or from another website, we record those tags and the referring site with your signup so we can tell which channels work. For ad click identifiers we record only that one was present, not the identifier itself
  • Newsletter subscription — your email address and consent record when you subscribe to the free Market Digest newsletter

3. What We Do Not Collect

  • We do not collect or store brokerage credentials or real trading account details
  • We do not collect payment card data (no paid subscriptions currently exist)
  • We do not place advertising trackers inside the app at app.gempulse.io
  • We do not sell your data to any third party, and we never share your watchlist or portfolio with advertisers

4. How We Use Your Data

We use your data only to operate and improve the Platform:

  • Authenticating your account and keeping it secure
  • Personalizing scores and portfolio recommendations to your risk profile
  • Displaying your watchlist and portfolio holdings when you log in
  • Generating AI-written briefings and summaries about your watchlist and portfolio (see Section 7)
  • Sending the email digests you opt in to (e.g. the gap-scanner and market digests); you can turn these off in settings or via the unsubscribe link
  • Sending the Market Digest newsletter and occasional product updates, only if you gave express consent
  • Measuring which websites, posts, and ads bring new members to GemPulse
  • Sending service notices (e.g., account-related emails, major feature changes)
  • Investigating security incidents using IP logs
  • Improving platform performance and fixing bugs using aggregate usage patterns

5. Admin Access to Your Data

In the course of operating the Platform, authorized GemPulse administrators have access to the following data associated with your account:

  • Your name, email address, membership tier, and account status
  • Your watchlist tickers
  • Portfolio holdings you have entered into the Platform
  • Your selected risk profile
  • Your login history and associated IP addresses
  • Signup details, including how you found us

Admin access is limited to individuals at GemPulse Technologies Inc. who require it to operate, support, and secure the Platform. We do not share this data with external parties except as described in Section 7 (Third Parties).

6. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate security purposes (e.g., retaining IP logs related to a security incident for up to 90 days after account closure).

7. Third-Party Services

We use a limited number of third-party services to operate the Platform:

  • Market data providers — we retrieve stock data (prices, fundamentals, analyst ratings) from licensed data APIs; your personal data is not shared with them
  • Email delivery — account and digest emails (login details, password resets, alerts, digests) are sent via Resend; your name and email address are shared only to the extent required for delivery
  • Newsletter — if you subscribe to the Market Digest newsletter, your email address and consent record are shared with Beehiiv, which hosts and sends the newsletter
  • AI providers — to generate AI briefings and summaries, we send stock tickers, scores, portfolio weights, portfolio names, and your risk profile to third-party AI model providers (such as Google Gemini). We do not include your name or email address in these requests
  • Website analytics and advertising measurement — on gempulse.io (not inside the app), we may use Meta Pixel and Google Analytics. These tools use cookies or similar identifiers to measure visits and whether a visit led to a signup, and to help us show our ads to relevant audiences. Meta and Google process this data under their own privacy policies. You can block these cookies in your browser settings and adjust your ad preferences in your Meta and Google accounts
  • Hosting and infrastructure — the website is hosted on Vercel; the Platform runs on our own servers and a cloud database service (Supabase), delivered through Cloudflare. Your data may be stored and processed in Canada and the United States

8. Cookies and Local Storage

The app stores your login session and display preferences in your browser's local storage so you stay signed in and your settings persist. The website keeps campaign tags for the length of your visit (session storage) so they can be attached to a signup. If analytics and advertising tools are enabled on gempulse.io, they set their own cookies as described in Section 7.

9. Security

We implement industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords (bcrypt), and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but take it seriously.

10. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request correction of inaccurate data
  • Deletion — request deletion of your account and associated data
  • Opt-out of emails — unsubscribe from marketing or digest emails at any time
  • Withdraw consent — withdraw consent to optional processing, such as marketing email or advertising measurement

To exercise any of these rights, contact us at support@gempulse.io. We will respond within 30 days.

11. Children's Privacy

The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with data, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 14 days before they take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

13. Contact Us

GemPulse Technologies Inc.
18 King Street East, Suite 1400
Toronto, ON M5C 1C4, Canada
Email: support@gempulse.io