Westor — Privacy Policy
Controller: Henrik Hanssen ("Westor", "we"), Norway.
Contact: westorsupport@gmail.com. We will supply a postal address on request.
1. What we collect
- Account: your email address and a securely hashed password.
- Consent record: the version of these terms you accepted and when.
- Subscription: your plan, its status/expiry, and Apple's transaction id. We
do not receive or store your card details — payment is handled by Apple.
- Your content: watchlist symbols, portfolio positions, and alerts you create.
- Device token: to deliver push notifications (if you enable them).
- Language: the language you read the app in, so that notifications, the morning
briefing, follow check-ins and emails reach you in it. Nothing else about you is
inferred from it.
- Morning briefing (optional): whether it is on, your time zone and the hour
you chose, and the trend labels of your watchlist at the last briefing, so the
next one can say what changed.
- Free-plan counters: which ideas and analyses you opened, and when, so the
free allowance can be counted. Each is deleted once its window has passed
(24 hours for ideas, 7 days for analyses).
- Usage: a small number of product events — that the app was opened, that
the upgrade screen was viewed, and similar — with the platform (iOS/Android),
the time, and a random identifier we generate on your device. Once you are
signed in these are also linked to your account. They tell us whether the app
is being used and where people get stuck. They are stored on our own
servers; there is no third-party analytics or advertising SDK in the app, and
no identifier supplied by Apple is collected.
- Technical: your IP address is processed transiently to protect the service
(rate limiting) and is not stored.
We do not track you across other apps/websites, show ads, or sell your data.
2. Why we use it (legal bases)
- To provide the service (performance of a contract).
- With your consent, given at sign-up (which you can withdraw by deleting your account).
- Our legitimate interest in keeping the service secure and preventing abuse.
3. How long we keep it
For as long as your account exists. When you delete your account, your personal
data is deleted promptly. Security logs and legally required records may be kept
for a limited period. Password-reset codes expire within 30 minutes.
4. Who we share it with (processors)
- Hosting / database: Render (Frankfurt) and Neon (EU region).
- Push delivery: Expo / Apple Push Notification service.
- Payments: Apple.
- AI analysis (optional): Anthropic, for generating written analysis. We
send only market/analysis context, not your identity, for this.
Each processor is bound by a data-processing agreement. Data is stored in
the EU (Frankfurt); any transfer outside your region uses Standard Contractual Clauses.
5. Your rights
You can, at any time: access and export your data, correct it, delete
your account and data, withdraw consent, and object to or restrict processing.
Use Settings → Privacy & data in the app, or contact westorsupport@gmail.com.
You may also complain to your local data-protection authority. (California
residents: you have the right to know, delete, and correct; we do not sell or
share personal information.)
6. Security
We protect your data with encryption in transit (TLS) and at rest, salted
password hashing, rate limiting, account-lockout, and strict access controls.
7. Children
Westor is not directed to anyone under 18 and we do not knowingly collect
their data.
8. Not financial advice
Westor is a market-analysis tool for information and education only. Its
analyses are automated estimates and are not financial, investment, legal or
tax advice, and not a recommendation to buy, sell or hold anything. Investing
is risky — the value of investments can rise and fall and you can lose money.
You are responsible for your own decisions, and Westor is not liable for
any losses. See the full Terms of Service and risk disclaimer.
9. Changes
We will post changes here and, for material changes, ask you to re-accept.