Privacy Policy

Commodity Intelligence · Last updated 1 September 2026

Information we collect

• Account details you provide: your name, email address and — if you sign up with email — your mobile number.
• If you sign in with Google: your name, email address and a Google account identifier, sent to us by Google. We never receive your Google password, and Google does not give us a phone number.
• Your password, stored only as a salted argon2id hash — never in plain text.
• Security logs: IP address, device/browser user-agent and authentication events (sign-in, sign-out, password reset), kept to protect your account and detect abuse.

We do not use advertising or third-party analytics/tracking SDKs, and we do not sell your data.

Signing in with Google

You can create an account and sign in using your Google account. If you do, Google sends us three things: your name, your email address, and a Google account identifier that lets us recognise you on your next sign-in.

We never receive your Google password, and we do not receive a phone number when you sign in this way. We use this information only to create and authenticate your account. We do not share it with third parties, and we do not use it for advertising.

If you already had an account with the same email address, signing in with Google links to that existing account rather than creating a second one. You can delete your account, and everything associated with it, at any time from the Account screen in the app.

How we use your information

• To create, secure and authenticate your account.
• To send one-time login codes and password-reset codes by email (two-factor authentication).
• To operate, maintain and protect the service.

Service providers (sub-processors)

We share the minimum data necessary with providers who process it solely on our behalf, under our instructions:

• Brevo — delivers your one-time login and password-reset emails (receives your email address and name for the purpose of sending).
• Anthropic (Claude) — generates the AI market briefings, commentary and Assistant answers. When you use the AI Assistant, your question and a snapshot of market data are sent to Anthropic to produce a response; this content is processed transiently, is not stored by us, and is not used to train models.
• Neon — hosts the database where your account data is stored.
• Vercel — hosts and serves the application and its APIs.

These providers act as processors; we do not sell or transfer your data for their own independent use.

Market data sources

Commodity prices are fetched from Yahoo Finance and the MNP Steel Index. No personal information is sent to these sources.

Data security

All data is encrypted in transit using HTTPS/TLS (with HSTS). Passwords are hashed with argon2id. Access is protected by short-lived access tokens, rotating refresh tokens and email one-time-code (OTP) two-factor authentication.

Data retention & deletion

We keep your account data until you delete it. You can permanently delete your account and all associated data at any time from the in-app Account → Delete account screen, which removes your profile, sessions and login codes. To request deletion without the app, email mehedi.fin@gmail.com from your registered address.

Children

The app is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time; the “Last updated” date above will change accordingly.

Contact

For any question or request: mehedi.fin@gmail.com.