Privacy Policy
Last updated 2 August 2026
This policy explains what WOWS collects, why, who it is shared with, and what control you have over it. WOWS is operated by Shain Studio.
1. What we collect
Account information
- Your name and email address.
- Your password, stored only as a salted hash — we never hold it in a readable form and cannot recover it for you.
- The profile details you give at sign-up: country, investment goals, risk tolerance and preferred industry. These personalise your experience and the emails we send.
Things you create on the platform
- Your watchlist symbols.
- Your price alerts and their trigger history.
- Your simulated trading data: virtual cash balance, positions, orders, executed trades and periodic snapshots of your portfolio value over time.
- Your email preferences, including whether you have opted out of the daily digest.
Technical information
- A session cookie that keeps you signed in. It is strictly necessary for the platform to function — we do not use advertising or third-party tracking cookies.
- Standard server logs generated when your browser makes a request, which may include your IP address, user agent and the pages you requested.
What we do not store
AI Analyst conversations are not saved to our database. Your messages are transmitted to the model provider to generate a response and held in your browser for the duration of the session only; refreshing the page discards them. Note that the provider handles your prompt under its own retention policy — see section 3.
2. Why we use it
- To create and secure your account and keep you signed in.
- To operate the features you use — showing your watchlist, running your simulated portfolio, evaluating your resting orders and price alerts.
- To give the AI Analyst context. When you enable it, your watchlist symbols and recent related headlines are included in the request so answers relate to what you actually follow.
- To send you service email: a welcome message, price-alert notifications, and the daily market digest if you have not opted out.
- To diagnose faults, prevent abuse and keep the platform running.
We do not sell your personal data, and we do not share it with advertisers or data brokers.
3. Third parties your data reaches
Operating WOWS means passing some data to the services below. Each handles it under its own privacy policy.
- Google (Gemini) and Groq — receive your AI Analyst prompts, together with the watchlist symbols and headlines injected as context when you enable it. Do not put sensitive personal information into AI prompts.
- Finnhub and Yahoo Finance — receive the ticker symbols needed to fetch quotes, charts, fundamentals and news. Requests are made by our servers, so these providers do not receive your identity or IP address.
- MongoDB Atlas — hosts the database holding your account and platform data.
- Inngest — runs our scheduled and background jobs; job payloads can include your email address and name.
- Our email provider — receives your email address and message content in order to deliver platform email.
- Our hosting provider — processes requests to the platform and generates the server logs described above.
These providers operate in various countries, so your data may be processed outside your own. We choose established providers and pass them the minimum needed to deliver the feature.
4. How long we keep it
Account and platform data is kept for as long as your account exists. Portfolio value snapshots are capped at the most recent 500 points per user, with older ones discarded automatically. Session cookies expire on their own schedule. Server logs are retained for a limited period by our hosting provider.
5. Your choices and rights
- Review and correct. Your profile details can be viewed and edited at any time in account settings.
- Opt out of email. Every daily digest carries a one-click unsubscribe link that works without signing in, and the same setting is available in account settings. Essential account email — such as security notices — is not covered by the opt-out.
- Delete everything. Deleting your account from account settings permanently removes your account together with your watchlist, alerts, and all simulated trading records. This cannot be undone.
- Ask us. Depending on where you live you may have additional rights, including to a copy of your data or to object to certain processing. Contact us and we will do our best to help.
6. Security
Passwords are hashed, sessions are cookie-based, and all third-party API credentials are held server-side and never exposed to your browser. That said, no online service can guarantee absolute security, and you should use a strong, unique password.
7. Children
WOWS is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
8. Changes and contact
We may update this policy; the date at the top reflects the current version, and material changes will be brought to your attention. Questions can be directed to Shain Studio through the contact details published at shainwaiyan.com. See also our Terms of Service and Risk Disclaimer.