Legal
Privacy Policy
Effective Date: 1 May 2026
Foxhole Analytics ("we", "us", or "our") is committed to protecting the personal information you entrust to us. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the choices you have regarding your information. By accessing or using the Foxhole Analytics platform, you agree to the practices described in this policy.
Information We Collect
Account Information. When you register for an account, we collect your name, email address, and a hashed password. You may optionally provide a display name and time zone preference.
Usage Data. We automatically collect information about how you interact with the platform, including pages visited, features used, query parameters submitted to our analytics engine, and session duration. This data is collected via server logs and first-party analytics.
Portfolio and Watchlist Data. Any securities, positions, or watchlists you enter into the platform are stored in order to provide the service. This data is associated with your account and is never used for commercial purposes beyond delivering the platform to you.
Device and Technical Information. We collect browser type, operating system, IP address, and screen resolution for security monitoring and to optimise platform rendering. IP addresses are anonymised within 90 days of collection.
Communications. If you contact us via the contact form or email, we retain that correspondence to respond to your enquiry and improve our support processes.
How We Use Your Information
We use the information we collect for the following purposes:
- To create and manage your account and authenticate your identity.
- To deliver the analytics, signals, forecasts, and portfolio tracking features of the platform.
- To send transactional emails such as account confirmations, password resets, and service notifications. We do not send unsolicited marketing emails without your explicit opt-in.
- To monitor platform performance, detect errors, and improve reliability.
- To investigate and prevent fraudulent or unauthorised use of the platform.
- To comply with applicable legal obligations.
We do not sell, rent, or licence your personal information to third parties. We do not use your portfolio or financial data to train external machine-learning models or for any purpose other than providing the service to you.
Data Security
We implement industry-standard security controls to protect your data. All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher. Passwords are stored using a strong one-way hashing algorithm and are never stored in plaintext.
Access to production databases is restricted to authorised personnel only, protected by multi-factor authentication, and audited regularly. We conduct periodic security reviews and act promptly to remediate identified vulnerabilities.
While we apply rigorous controls, no system is completely immune to breach. In the event of a security incident that materially affects your data, we will notify you in accordance with applicable law.
Data Retention
We retain account data for as long as your account remains active. If you close your account, we will delete or anonymise your personal information within 60 days, except where retention is required by applicable law or legitimate business interest (such as dispute resolution or fraud prevention).
Server logs containing IP addresses are retained for up to 12 months for security purposes. Anonymised, aggregated usage statistics may be retained indefinitely as they cannot reasonably be used to identify you.
Third-Party Services
We use a limited number of trusted third-party service providers to operate the platform. These may include cloud infrastructure providers, market data vendors, and email delivery services. Each provider is contractually bound to process your data only as instructed by us and in accordance with applicable data protection law.
Our platform does not embed advertising networks, social media tracking pixels, or third-party behavioural analytics. Any third-party JavaScript loaded by the platform (such as the Bootstrap framework) is served solely to support platform functionality.
Links to external websites, if present, are provided for informational purposes. We are not responsible for the privacy practices of any linked third-party site and encourage you to review their respective privacy policies.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access. You may request a copy of the personal data we hold about you.
- Correction. You may request that inaccurate or incomplete data be corrected.
- Deletion. You may request deletion of your account and associated personal data, subject to legal retention requirements.
- Portability. You may request your data in a structured, machine-readable format.
- Objection. You may object to certain processing activities, such as the use of your data for analytics.