Privacy Policy

Last updated: August 16, 2026

This policy explains how Pop Terminal handles personal data when you use the Service. It applies to visitors, account holders, subscribers, creator applicants, and approved creators. Pop Terminal is currently designed for US users and US-listed-equity research.

Information we collect

• Account and support data: email address, authentication records, timezone, preferences, and communications you send to us.
• Research and portfolio data: searches, ticker views, watchlists, manually entered or CSV-imported holdings, weights, cost basis, notes, alert settings, read state, and saved research.
• Service and device data: feature interactions, referring pages, browser and device attributes, timestamps, request identifiers, approximate network information, security events, and diagnostic logs. Security systems may process an IP address, but the referral record is designed around an opaque signed visitor token, not raw IP or account PII.
• Commerce and subscription data: customer and subscription identifiers, plan, entitlement and trial status, checkout status, referral attribution, commission ledger entries, and payout status. Stripe handles payment-form data; Pop Terminal does not receive full card numbers.
• Creator data: application details, referral code, aggregate clicks and conversions, disclosure acknowledgments, and onboarding or payout status. Subscriber PII is not shown to creators.

How we use information

We use information to provide accounts and personalized research; compute portfolio views; enforce plan limits; deliver opted-in alerts; attribute referrals; operate checkout and subscription billing; respond to support; detect abuse; troubleshoot and measure the Service; comply with law; and improve product reliability. We do not use private holdings to alter the canonical score shown for a security.

AI processing

AI services may process a snapshot, cited evidence, and a user's research request to produce a summary. Private account data should be included only when required for the requested feature. AI-generated summaries may be retained with their source snapshot for consistency, safety, cost control, and audit. Do not submit highly sensitive personal information in notes or prompts.

Cookies and analytics

We use storage needed for authentication, security, preferences, and a 30-day creator-referral window. Non-essential product analytics are subject to the consent choices described in our Cookie and Analytics Notice.

Service providers and disclosure

We disclose information only as needed to providers that help operate the Service, currently including our managed hosting, database, authentication, secrets, and email infrastructure providers; Stripe for checkout and Connect payouts; Financial Modeling Prep and other enabled data sources; an AI gateway or model provider for summaries; and configured analytics and error-monitoring providers. We may also disclose data to comply with law, protect users or the Service, investigate abuse, complete a corporate transaction with appropriate safeguards, or when you direct us to share it. We do not provide creators with referred subscribers' personal data.

YouTube API Services and external video content

Where enabled, the Service embeds and links to third-party video content — including content sourced through the YouTube API Services. By using features that display such content you also agree to the YouTube Terms of Service and acknowledge Google's Privacy Policy. Pop Terminal uses the YouTube API Services only to discover and display metadata (title, channel, thumbnail, publish time) for videos that discuss covered tickers; we do not share your identity, account, portfolio, watchlist, or research activity with YouTube or Google as part of that discovery. You may revoke Google's access to your data at any time via the Google security settings page. Video playback occurs on the YouTube player and is governed by Google's policies; Pop Terminal does not control, endorse, or verify third-party creators or comments and educational commentary is not financial advice.

Retention and security

We retain data only as long as reasonably needed for the purposes above, legal obligations, dispute resolution, security, and audit. Different categories may have different periods; immutable billing, referral, or security records may outlast an account where required. We use technical and organizational safeguards, but no system is completely secure.

Your choices and rights

You can update preferences in the Service, unsubscribe from marketing or alert email, and change non-essential analytics choices where available. Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal data, or to object to or restrict certain processing. Send requests to hello@popcapital.io. We may need to verify identity and may retain information when law permits or requires.

Children

The Service is not directed to children under 18, and we do not knowingly collect their personal data. Contact us if you believe a child has provided data.

Changes and contact

We may update this policy and will change the date above. Questions and privacy requests may be sent to hello@popcapital.io.