Privacy Policy
Effective: 2026-09-29
This policy explains how GuruTrack (https://gurutrack.ai, "we", "the Site") collects, uses, stores, shares and deletes your information. The Site is a research tool for public U.S. market disclosures: it shows institutional 13F holdings, trading disclosures by members of Congress and government officials, and company insider transactions. Browsing needs no account; signing in only saves your follow lists and portfolio.
What we collect
Account information: when you choose to sign in with Google or X (Twitter), we receive your account identifier, name, email and avatar from that provider to create and identify your account (see the next section for exactly what Google provides).
Content you create: your follow lists and the portfolio holdings you enter yourself. Those account-backed items are synced across devices; recent watchlist checks made while signed out are stored only in the current browser.
Technical & usage data: the session cookie required to keep you signed in, and—where enabled—anonymized analytics (page views, device type, entry source, content type, and a validated public stock symbol after you explicitly select it) to understand usage and improve the product. Analytics does not record search-box text and never receives your email, account ID, personal holdings, cost basis or quantities.
The U.S. 13F, STOCK Act, OGE 278-T and Form 4 data shown on the Site comes from official public SEC, House, Senate and OGE filings; it is public market data, not your personal data.
Google user data
When you choose “Sign in with Google”, the Site requests only Google’s basic sign-in scopes (openid, email, profile). From these we receive your Google account identifier, name, email address and whether it is verified, and your profile picture URL. The Site does not request or access your Gmail, Google Drive, contacts, calendar or any other Google data.
Use: solely to sign you in, identify your account, and show your name and picture in the account menu. We do not use Google user data for advertising, do not sell it, do not use it to train any AI model, and do not transfer it to third parties except the hosting and database providers needed to run the Site, with your explicit consent, or where required by law.
Storage and protection: this information, and the tokens Google issues at sign-in, are stored in the database on the Site’s own server, transmitted only over HTTPS, and accessible only to the Site’s operators. The tokens are kept only to maintain the sign-in link; the Site does not use them to call any Google API.
Retention and deletion: the data is kept while your account exists. You can ask us to delete your account at any time by emailing [email protected]; within 30 days we delete your account, sign-in link and tokens, together with your follows and portfolio. You can also revoke the Site’s access at any time on your Google Account’s “Third-party apps & services” page (https://myaccount.google.com/connections).
The Site’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we use it
To authenticate you and keep you signed in; sync your follows and portfolio across devices; remember anonymous recent watchlist checks in the current browser; operate, maintain and improve the Site; and handle security and abuse prevention when necessary.
We do not sell your personal data, nor use it for purposes unrelated to the above.
Who we share with
Authentication providers: Google, X (Twitter) — only when you choose to sign in with them, and only to complete sign-in.
Infrastructure providers: hosting, database and content delivery (Cloudflare) necessary to run the Site; they process data only on our instructions.
Brand-logo provider: logo.dev — used only to display company/stock logos; no personal data is involved.
Legal requirements: we may disclose information where required by law. Otherwise we do not sell, rent or transfer your data to third parties.
Cookies
We use a necessary session cookie to keep you signed in. Where analytics is enabled, we may use anonymized analytics cookies. You can clear cookies in your browser, though you may then need to sign in again.
Retention & your rights
Your account data is kept while you use the Site. You have the right to access, correct or delete your data: you can remove your follows and portfolio on the Site, or email [email protected] to delete your entire account and associated data. Local watchlist history can be removed by clearing this site's browser data.
After a deletion request we delete or anonymize your personal data within 30 days, except where retention is legally required, and confirm by reply.
Minors
The Site is intended for adult investment-research users. It is not directed to children under 16 and we do not knowingly collect their personal information.
Changes
We may update this policy from time to time. Material changes will be reflected by updating the effective date on this page. Continued use means you accept the updated policy.
Contact
For any question about this Privacy Policy, or to access, correct or delete your data, email [email protected].