Privacy Policy

Zenith ("we", "us") is a stock screener and research tool built for participants in the DECA Stock Market Game. This policy explains what personal data we collect when you use the site, how we use it, and how to reach us. Questions or requests: usezenith.app@gmail.com.

You can browse the screener without an account, and in that case we collect no personal data beyond ordinary server logs.

• Account data. If you create an account: your email address and a password. Authentication is handled by Supabase; we never see or store your password in readable form.
• Profile and subscription data. Your subscription tier (free or Pro), a Stripe customer reference, and your email notification preference.
• Payment data. Payments are processed entirely by Stripe on Stripe's own pages. Card numbers never touch our servers. Stripe tells us who you are, whether your subscription is active, and nothing about your payment method beyond what is needed to manage the subscription.
• Email delivery data. If the 3:30 drop email is enabled for your account, our email provider (Resend) processes your address and standard delivery events.
• Server logs. Like nearly every website, our hosting infrastructure keeps short-lived request logs (IP address, browser user agent) used for debugging and abuse prevention.

We use no analytics or advertising trackers, we do not build behavioral profiles, and we do not sell or share personal data for advertising. Ever.

The stock data on Zenith (prices, volume, SEC filings) is public market information from third-party market data sources and the SEC's EDGAR system. It contains no personal data, and our requests to those sources carry nothing about you.

The daily short theses are generated by our own analysis engine from public market data. No personal data about you is sent to any AI provider.

• To sign you in and keep your account working.
• To know which features (free or Pro) to show you.
• To process your subscription through Stripe.
• To send the 3:30 drop email if it is enabled. It is on by default for new accounts; you can turn it off in Settings or with the one-click unsubscribe link in any email.
• To keep the service secure and diagnose problems.

We do not use your data for anything else.

Only the service providers that run Zenith, and only what each one needs: Supabase (database and authentication), Stripe (payments), Resend (email delivery), and our hosting provider. None of them may use your data for their own purposes. We share data with no one else unless the law requires it.

We keep account data for as long as your account exists. Email us to delete your account: your profile and authentication data are removed. Stripe retains transaction records it is legally required to keep.

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, at usezenith.app@gmail.com. If you live somewhere with specific privacy laws (for example California or the EU), those rights apply to you and we honor them for everyone anyway. We respond to every request; there is no fee.

Zenith is built for high-school DECA competitors, and many users are under 18. If you are under 18, you should use Zenith with a parent or guardian's permission, and a Pro subscription should be purchased by or with a parent or guardian.

Zenith is not directed to children under 13, and we do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has created an account, email us and we will delete it.

All traffic is encrypted in transit (HTTPS). Passwords are hashed by Supabase Auth. Database access is restricted with row-level security, so Pro-only and per-user data is enforced at the database layer, not just in the app.

If this policy changes, we will update this page and the date at the top. Material changes to how we handle account data will be announced by email.

See also the Terms & Conditions and the Cookie Policy.