Privacy Policy.

Information you provide directly. When you subscribe to a newsletter, create a free account, request data access, contact support, or fill out a form, you may give us:

• Email address
• Name (if you provide it)
• Payment information only if you hold a legacy paid subscription bought before October 10, 2026 (processed by Stripe — we do not store full card numbers; the free membership asks for no card)
• Communications you send to us (support requests, feedback)
• Survey responses, testimonial submissions, and similar content

Information we collect automatically. When you visit the Services we collect:

• IP address and approximate location derived from it
• Browser type, operating system, device type, screen size
• Pages viewed, time on page, scroll depth, links clicked, referring URL
• Tickers, themes, and research viewed (for personalization of follow-up content)
• Email-capture events, sign-up prompts, and similar behavioral signals
• Cookies and similar technologies (see Section 5)

Information from third parties. If you sign up via a third party (e.g., a social login, an affiliate link) we may receive limited profile information from that provider, subject to your settings with them.

We use information to:

• Deliver the Services, including the newsletters (The Daily Drop and the Morning Brief), research, scores, LikeFolio AI, and account access
• Service legacy paid subscriptions bought before October 10, 2026 (payments, refunds, and tax compliance)
• Personalize content (e.g., highlighting research relevant to tickers you've viewed)
• Send transactional emails (account notices, sign-in links, welcome and onboarding emails, and billing notices for legacy subscriptions)
• Send marketing emails and product announcements (you can unsubscribe at any time)
• Measure and improve the Services, including A/B testing and analytics
• Detect, prevent, and respond to fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms

We do not sell your personal information to third parties.

If you are in the European Economic Area or United Kingdom, we process your personal data on the following bases:

• Contract — to provide the Services you have signed up for
• Legitimate interests — to operate, secure, and improve the Services and to communicate with you
• Consent — for optional cookies, certain marketing communications, and any sensitive processing
• Legal obligation — when we are required by law to retain or disclose information

We share information with service providers who act on our behalf:

• Beehiiv — newsletter platform that stores subscriber email lists and sends The Daily Drop. When you create a LikeFolio.ai account we add your email to The Daily Drop list; every issue carries a one-click unsubscribe
• Google and Apple — when you sign in with Google or Apple we receive your email address and name from them, subject to your settings with them
• Resend — transactional email delivery (welcome emails, account notifications, magic links)
• Stripe — payment processing for legacy paid subscriptions only; Stripe holds card data under PCI DSS. We no longer sell consumer subscriptions
• TradeSmith — partner publisher of MegaTrends and the Earnings Season Pass. We link to their pages; we receive no card data from those purchases and their privacy policy governs what you give them
• Railway — cloud infrastructure that runs the Services and stores our databases
• Anthropic / OpenAI / other model providers — used to generate research-content drafts internally; we do not send your personal information to these providers as part of normal operations
• Analytics providers — for aggregate usage analytics; we do not provide them with your full personal profile

We may also share information (a) with your consent; (b) to comply with legal process, regulatory request, or government inquiry; (c) to enforce our Terms or protect the rights, safety, and property of LikeFolio or others; or (d) in connection with a merger, acquisition, financing, or sale of assets, in which case the recipient will be bound by obligations consistent with this Policy.

The Services use cookies, local storage, and similar technologies to keep you signed in, remember preferences, measure usage, and combat fraud. You can disable cookies in your browser settings, but some features of the Services may not work without them.

We honor browser Global Privacy Control signals where applicable. We do not knowingly engage in cross-context behavioral advertising of the kind regulated by the California Consumer Privacy Act.

We retain personal information for as long as you have an account or a newsletter subscription, and for a reasonable period after to satisfy legal, accounting, fraud-prevention, and dispute-resolution requirements. Aggregated and de-identified information may be retained indefinitely.

You can request deletion of your account and associated data at any time (see Section 8).

We use commercially reasonable technical and organizational measures to protect personal information — including encryption in transit (TLS), encrypted storage at rest where provided by our infrastructure, access controls, and routine security review. No system is perfectly secure, however, and we cannot guarantee the security of any information you provide.

If we become aware of a breach affecting your personal information, we will notify you where required by law.

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — ask us to delete your information, subject to legal exceptions
• Portability — receive your information in a structured, machine-readable format
• Restriction or objection — limit or object to certain processing
• Withdraw consent — where we relied on your consent
• Opt out of marketing — every marketing email has a one-click unsubscribe link
• Lodge a complaint — with a supervisory authority where applicable

To exercise these rights, email support@likefolio.com with the subject line “Privacy Request.” We will verify your identity and respond within the timeframe required by applicable law (generally 30–45 days).

California residents have the rights described in Section 8 above. The categories of personal information we collect — and the categories of third parties with whom we share them — are listed in Sections 1 and 4 respectively. In the twelve months preceding the “Last updated” date, we have not sold personal information as that term is defined under the CCPA, and we have not knowingly shared personal information for cross-context behavioral advertising.

California residents may designate an authorized agent to make requests on their behalf. We will require reasonable proof of the agent's authority.

The Services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

LikeFolio is based in the United States and our service providers operate in multiple countries. By using the Services you understand that your information may be transferred to, stored in, and processed in the United States and other countries where data protection laws may differ from those of your home country. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for international transfers.

The Services may link to third-party websites or services we do not control. This Policy does not apply to those sites — review their own policies before providing them with personal information.

We may update this Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, provide additional notice (e.g., by email or an in-product notice). Continued use of the Services after a change constitutes acceptance of the revised Policy.

Questions, requests, or concerns about this Policy can be sent to support@likefolio.com.