Privacy Policy

analysto ("the site", "the service", "we") is an online service for learning stock analysis: analysis of public data, educational content, and an algorithmic scan that identifies technical and fundamental patterns for study purposes. This document explains what personal data is collected about you when you use the service, why, what we do with it, and what rights you have over it.

It is written to comply with the Israeli Protection of Privacy Law, 1981, including Amendment No. 13, and the Protection of Privacy (Data Security) Regulations, 2017. Using the service constitutes acceptance of this policy alongside the site's Terms of Service.

For any privacy question or request, contact us at doronp89@gmail.com. We respond to privacy requests within a reasonable time and no later than the period prescribed by law.

Data you knowingly provide: name, email address, mobile phone number, password (stored only as a one-way hash and not recoverable), and account preferences. Signing up with Google brings in your name, email address and profile picture from that account.

Data generated through use: content you create in the service (demo portfolio, price alerts you set, stocks you follow, support requests and feedback), sign-in times, and language preference.

Technical browsing data: IP address, browser and device type, pages viewed and when, and referral source. This is collected mainly for security, abuse prevention and statistical measurement.

Data for push notifications, if and when you enable them: the browser's push endpoint, its encryption keys, the user agent and the consent timestamp.

Payment data, if and when a payment mechanism is activated: cardholder name, last four digits, card brand and expiry. The full card number and CVV are never sent to our servers and are never stored by us.

We do not knowingly collect data about minors under 18. The service is intended for adults only.

To provide the service itself: creating and managing your account, authenticating you, storing your preferences and the content you create, and showing the content relevant to your service tier.

To secure the system and prevent abuse: detecting intrusion attempts, rate-limiting, preventing automated account creation, and diagnosing faults.

For operational contact: notices about your account, changes to the terms, faults, or matters directly related to the service. These are not marketing and are sent to every registered user.

For marketing communications — only if you explicitly ticked the consent box. Marketing consent is not a condition of registering or of using the service, and signup completes without it.

For statistical measurement and product improvement: understanding which pages are useful, where users get stuck, and what to improve. Measurement is performed at an aggregate level.

To meet legal obligations and protect our legal rights, including retaining a record of the consents you gave (Terms acceptance, marketing consent, and acceptance of the study declaration at the entrance to the scan).

Providing your data is not a legal obligation — it follows from your wish to use the service. That said, without some of it (email, password, phone) an account cannot be created and the service cannot be provided.

Each item of data is used for the purpose for which it was provided, as set out in section 3, and only to the extent that purpose requires. Data collected for one purpose is not repurposed without a separate basis.

Consents can be withdrawn at any time: marketing — via the unsubscribe link in every message or by contacting us; push notifications — from the site or your device settings; analytics cookies — from your browser settings. Withdrawal does not affect the lawfulness of prior use and does not affect your access to the service.

We do not sell personal data and do not trade in it. Data is not passed to advertisers, brokers, investment houses or any other commercial party for marketing purposes.

Data is processed by the infrastructure providers we rely on to run the service, each receiving only what its role requires: site hosting and servers; the managed database where the account is stored; the email delivery service; the push infrastructure of browser and operating-system vendors, to deliver notifications to your device; and market-data providers, which receive stock symbols and never user details.

Data may be stored or processed on servers outside Israel, including in the European Union and the United States, depending on where our infrastructure providers operate. We choose providers that maintain accepted information-security standards.

Data will also be disclosed where required by law or court order, or where necessary to protect our legal rights. In addition, in a merger, acquisition or transfer of business, data may pass to the acquiring entity, subject to the continued application of this policy.

Essential cookies always run, because without them the service cannot function: keeping you signed in, protecting forms against request forgery, and remembering your language. They are not used for advertising.

Analytics cookies, used for statistical measurement of usage, run only after you approve them in the cookie banner. Until you choose, they do not run, and choosing "essential only" keeps them off. You can change your choice at any time by clearing the site's data in your browser.

We also store a cookie recording that you accepted the study declaration at the entrance to the scan, so you are not asked to accept it again on every visit.

Account data is kept for as long as the account is active. When an account is deleted, the account details and the content you created in the service are deleted.

Records of consents you gave and of legally significant actions may be retained after account deletion, to the extent needed to defend against legal claims and to meet legal obligations.

Access and security logs are kept for a short, limited period, as required for security and fault diagnosis.

Right of access: you may inspect the personal data we hold about you. Contact us by email and we will respond within a reasonable time.

Right of correction: if the data is wrong, incomplete or out of date, you may ask us to correct or delete it. Basic account details can also be updated directly from your account area.

Right of deletion: you can delete your entire account from the account area. It is irreversible and removes your account details and the content you created.

Right to opt out of marketing: every marketing message carries a one-click unsubscribe link that requires no sign-in. You may also contact us by email.

If you believe your data was mishandled, you have the right to complain to the Israeli Privacy Protection Authority at the Ministry of Justice.

Traffic to the site is encrypted, passwords are stored only as one-way hashes, access to the database is restricted and controlled, and rate-limiting and a content-security policy harden the site. All active sessions of an account can be revoked at any time.

That said, no online system is completely immune. We cannot promise absolute security, and it is important that you keep your credentials confidential and use a unique password.

A serious security incident will be handled and reported as the law requires.

We may update this policy from time to time. The updated version will be posted on this page with a new date, and a material change will be brought to registered users' attention. Continued use after the update constitutes acceptance of the updated policy.

This policy was drafted in Hebrew and translated into English for convenience only; in any conflict, the Hebrew version prevails.