Privacy Policy

We collect the following categories of information:

• Account information. Email address and password hash (passwords are never stored in plain text), display name, optional first and last name, optional bio and LinkedIn URL, optional industries and market-cap preferences you select during onboarding, optional profile photo.
• Shareholder verification.When you choose to verify ownership of a public company's stock, you connect a brokerage account through Plaid. Plaid handles the credentials directly — we never see, receive, or store your brokerage login. We retrieve your investment holdings once, count the shares you hold of the relevant ticker, store the count plus the brokerage's name and the timestamp of verification, and immediately revoke our access. We do not store Plaid access tokens.
• Activity on the Service. Posts, questions, poll responses, reward claims, notifications, and similar engagement records you create while using the Service. Poll responses are stored anonymously — companies see aggregate results only.
• Technical data. Standard server logs (IP address, user agent, timestamps) used for security monitoring and abuse prevention. We do not use third-party analytics or advertising trackers.

• Operate the Service: authenticate you, render your portfolio, show you content from companies you've joined, process reward claims.
• Communicate with you about Service activity (in-app notifications). We do not currently send marketing emails.
• Maintain security: detect abuse, enforce rate limits, respond to incidents.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We share it only as described below:

• With companies whose passes you join. Your display name, profile photo (if any), and verification status (verified / unverified) are visible. Your share count, brokerage name, and re-verification date are visible to admins of that specific company so they can administer eligibility for rewards and engagement features. Your individual poll responses are never shared — only aggregate results.
• With service providers. We use Supabase (database and authentication), Vercel (hosting), and Plaid (brokerage verification). These providers process your data on our behalf under their own security and privacy commitments.
• For legal reasons. If required by law, court order, or to protect the rights, property, or safety of Shareholder Pass, our users, or others.

We keep your account information for as long as your account is active. You can request deletion of your account at any time by emailing us at the address below. On deletion we remove your account record, profile, memberships, posts, questions, poll responses, and reward claims, except where we're legally required to retain certain records (for example, audit logs of rewards fulfilled). Anonymous aggregate poll counts may persist because they cannot be linked to you. We do not retain Plaid access tokens at any point — they are discarded after each verification.

Depending on where you live, you may have the right to access, correct, or delete your personal information; to object to or restrict certain processing; and to receive a portable copy of your information. To exercise any of these rights, email us at the address below. Most of these rights are also self-serve from your profile page.

We use TLS 1.2+ for data in transit and AES-256 encryption at rest for stored data. Production database access is gated by row level security policies and multi-factor authentication for our administrators. We do not store Plaid access tokens or your brokerage credentials. No system is perfectly secure, and we can't guarantee absolute security; we encourage strong unique passwords and prompt notification if you suspect unauthorized account access.

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Shareholder Pass is operated from the United States. By using the Service, you consent to the transfer and processing of your information in the United States, which may have different data protection rules than your country.

We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be communicated through an in-app notice or email.

Questions or requests? Email support@shareholderpass.com.