Privacy Policy.

Information you provide directly. When you subscribe to a newsletter, create an account, purchase a subscription, contact support, or fill out a form, you may give us:

• Email address
• Name (if you provide it)
• Payment information (processed by our payment processor — we do not store full card numbers)
• Communications you send to us (support requests, feedback)
• Survey responses, testimonial submissions, and similar content

Information we collect automatically. When you visit the Services we collect:

• IP address and approximate location derived from it
• Browser type, operating system, device type, screen size
• Pages viewed, time on page, scroll depth, links clicked, referring URL
• Tickers, themes, and playbooks viewed (for personalization of follow-up content)
• Email-capture events, paywall encounters, and similar behavioral signals
• Cookies and similar technologies (see Section 5)

Information from third parties. If you sign up via a third party (e.g., a social login, an affiliate link) we may receive limited profile information from that provider, subject to your settings with them.

We use information to:

• Deliver the Services, including newsletters, playbooks, and account access
• Process subscriptions, payments, refunds, and tax compliance
• Personalize content (e.g., highlighting playbooks relevant to tickers you've viewed)
• Send transactional emails (account, billing, password resets, magic links)
• Send marketing emails and product announcements (you can unsubscribe at any time)
• Measure and improve the Services, including A/B testing and analytics
• Detect, prevent, and respond to fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms

We do not sell your personal information to third parties.

If you are in the European Economic Area or United Kingdom, we process your personal data on the following bases:

• Contract — to provide the Services you have signed up for
• Legitimate interests — to operate, secure, and improve the Services and to communicate with you
• Consent — for optional cookies, certain marketing communications, and any sensitive processing
• Legal obligation — when we are required by law to retain or disclose information

We share information with service providers who act on our behalf:

• Beehiiv — newsletter platform that stores subscriber email lists and sends our newsletters
• Resend — transactional email delivery (welcome emails, account notifications, magic links)
• Stripe — payment processing on the Platform; Stripe holds card data under PCI DSS
• Railway — cloud infrastructure that runs the Services and stores our databases
• Anthropic / OpenAI / other model providers — used to generate research-content drafts internally; we do not send your personal information to these providers as part of normal operations
• Analytics providers — for aggregate usage analytics; we do not provide them with your full personal profile

We may also share information (a) with your consent; (b) to comply with legal process, regulatory request, or government inquiry; (c) to enforce our Terms or protect the rights, safety, and property of LikeFolio or others; or (d) in connection with a merger, acquisition, financing, or sale of assets, in which case the recipient will be bound by obligations consistent with this Policy.

The Services use cookies, local storage, and similar technologies to keep you signed in, remember preferences, measure usage, and combat fraud. You can disable cookies in your browser settings, but some features of the Services may not work without them.

We honor browser Global Privacy Control signals where applicable. We do not knowingly engage in cross-context behavioral advertising of the kind regulated by the California Consumer Privacy Act.

We retain personal information for as long as you have an account or subscription, and for a reasonable period after to satisfy legal, accounting, fraud-prevention, and dispute-resolution requirements. Aggregated and de-identified information may be retained indefinitely.

You can request deletion of your account and associated data at any time (see Section 8).

We use commercially reasonable technical and organizational measures to protect personal information — including encryption in transit (TLS), encrypted storage at rest where provided by our infrastructure, access controls, and routine security review. No system is perfectly secure, however, and we cannot guarantee the security of any information you provide.

If we become aware of a breach affecting your personal information, we will notify you where required by law.

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — ask us to delete your information, subject to legal exceptions
• Portability — receive your information in a structured, machine-readable format
• Restriction or objection — limit or object to certain processing
• Withdraw consent — where we relied on your consent
• Opt out of marketing — every marketing email has a one-click unsubscribe link
• Lodge a complaint — with a supervisory authority where applicable

To exercise these rights, email support@likefolio.com with the subject line “Privacy Request.” We will verify your identity and respond within the timeframe required by applicable law (generally 30–45 days).

California residents have the rights described in Section 8 above. The categories of personal information we collect — and the categories of third parties with whom we share them — are listed in Sections 1 and 4 respectively. In the twelve months preceding the “Last updated” date, we have not sold personal information as that term is defined under the CCPA, and we have not knowingly shared personal information for cross-context behavioral advertising.

California residents may designate an authorized agent to make requests on their behalf. We will require reasonable proof of the agent's authority.

The Services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

LikeFolio is based in the United States and our service providers operate in multiple countries. By using the Services you understand that your information may be transferred to, stored in, and processed in the United States and other countries where data protection laws may differ from those of your home country. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for international transfers.

The Services may link to third-party websites or services we do not control. This Policy does not apply to those sites — review their own policies before providing them with personal information.

We may update this Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, provide additional notice (e.g., by email or an in-product notice). Continued use of the Services after a change constitutes acceptance of the revised Policy.

Questions, requests, or concerns about this Policy can be sent to support@likefolio.com.