Privacy
Privacy Notice
This notice explains what StoxSpace processes, why it is needed, and the choices you have.
Effective 27 October 2026
Who operates StoxSpace
StoxSpace is an independent project developed and operated by Chetan Naik, an individual based in Bengaluru, Karnataka, India.
For questions about this Privacy Notice, your personal information, or requests to access or delete information you have shared with StoxSpace, please contact privacy@stoxspace.com.
Signing in with Google, and what StoxSpace can access
StoxSpace uses your Google Account to authorize limited access to specific files in your own Google Drive. The StoxSpace workspace and chart images remain in your Drive and are processed in your browser.
- Permission requested. StoxSpace requests the Google Drive per-file permission (
drive.file), not permission to browse or manage your entire Drive. It can work with files it creates or files made available to this app through Google's per-file authorization. - Limits of that permission. Files visible to you in Google Drive are not necessarily accessible to the current StoxSpace connection. For example, files from an earlier Google connection may remain in Drive but be unavailable to this one.
- Why access is needed. StoxSpace uses the permission to create, find, read, update, and delete its accessible workspace and chart files when you use the corresponding features.
- Where files are stored. New workspaces use a “StoxSpace” folder containing
stoxspace-data.json, with uploaded chart images kept separately in achartssubfolder. Files from older versions may remain in a “Stock Scanner” folder. The JSON stores chart file references, not the image bytes. - What is not requested. This connection does not request a Google profile, contacts, or unrestricted Drive access. If you separately email StoxSpace, your email address and message are received through that correspondence.
What StoxSpace processes
- Your workspace content: stock symbols, company names, ratings, notes, watchlists, trading capital and risk preferences, planned trades, executions, checklists, principles, and weekly reviews that you enter. This content is saved as JSON in your Google Drive.
- Uploaded chart images: chart screenshots you choose to upload are stored as separate files in your Google Drive. Your journal records the corresponding Drive file IDs.
- Google Drive authorization: a short-lived access token held in browser memory while you are connected. The token is used for the Drive operations you request.
- Device storage: the light or dark theme, legal notice acceptance, optional product-tour preference, and an incomplete-deletion warning if a deletion attempt is interrupted. The warning can include affected Drive file IDs and error details, but not a backup of your workspace or chart images.
- Technical delivery data: Cloudflare, as the hosting and network provider, may process limited information such as IP address, browser type, request time, and security events to deliver and protect the site.
- Invite requests and support messages: your email address, message content, and any information or attachments you choose to send when requesting access or assistance.
How and why data is used
Workspace content is processed in your browser to provide the stock review, watchlist, risk planning, checklist, and journal features you request. Workspace records are saved to a StoxSpace JSON file in your Google Drive; chart image files are uploaded and read separately when you use the chart feature. StoxSpace uses Google API data only to provide the user-facing features you request.
StoxSpace's use of Google user data (Limited Use)
StoxSpace's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- StoxSpace uses Google user data only to provide the features you request — creating, reading, updating, and deleting accessible StoxSpace workspace and chart files as you request.
- StoxSpace does not sell your Google user data.
- StoxSpace does not use your Google user data for advertising, and does not use it to train artificial-intelligence or machine-learning models.
- StoxSpace does not transfer your Google user data to third parties, except where needed to operate the requested feature, to keep the service secure, or where the law requires it.
- StoxSpace does not allow humans to read your Google user data, except with your consent, for security purposes, or where the law requires it.
What StoxSpace does not collect or do
StoxSpace has no application database for your research or journal, and it does not use advertising, analytics, session replay, or marketing trackers. StoxSpace does not set an application authentication cookie.
Other services
Cloudflare delivers and protects the website at the network level. Google processes Drive authorization and stores the StoxSpace file under your Google account. Selecting a TradingView or Screener research link opens that provider in a separate tab; their own privacy terms then apply.
Storage and retention
- Workspace JSON and chart image files remain in your Google Drive until deleted in Drive or through the app where they are accessible. Disconnecting or revoking Google access alone does not remove those Drive files.
- The Google access token stays in browser memory only and is removed from the app on refresh, sign-out, expiry, or tab closure.
- Theme, legal-acceptance, and product-tour preferences remain on your device until cleared. If deletion is interrupted, the app retains a local warning until a completed attempt clears it or you remove browser site data. Clearing that warning alone does not delete any Drive files.
- Invite requests and support correspondence are kept only while needed to respond, resolve an issue, or meet legal requirements. Messages that are no longer needed are deleted during periodic reviews; there is no automatic deletion schedule. Deleting Drive workspace files does not delete those emails.
- Cloudflare may keep security and delivery records under its own retention practices. StoxSpace does not maintain a separate application database containing copies of your research, journal, or uploaded chart images.
Deleting your files and disconnecting Google
In Privacy & data settings, Delete all app dataattempts to permanently delete StoxSpace-marked workspace JSON files and chart images that the current Google connection can find. It does not search or delete unrelated files elsewhere in your Drive. Empty folders may remain.
- Before deletion, StoxSpace checks that workspace and chart files referenced by the open workspace can be found in its accessible file listings. If a known file is missing, it stops without deleting files and shows a warning instead of claiming success.
- If an operation fails after deletion begins, some files may already have been removed. StoxSpace keeps a browser warning, pauses editing and saving, and retains the Google connection so you can retry.
- After the app completes deletion of the accessible files, it clears local preferences and requests revocation of Google access. Revocation can also be checked or managed from your Google Account's third-party connections.
- Check Google Drive afterward. Files left from an earlier connection, or otherwise outside the current connection's file permissions, may not be found or deleted automatically. Review both “StoxSpace” and “Stock Scanner” folders and remove any remaining StoxSpace files manually if you want them deleted. Contact privacy@stoxspace.comif you need assistance.
Your choices and rights
You can view and correct content inside StoxSpace, export your workspace records as JSON, clear browser preferences, disconnect Google Drive, revoke access, and request deletion of files the app can access. A JSON export contains the workspace records and chart file references, not the separate chart image bytes.You may also manage or delete remaining files directly in Google Drive. To request assistance, withdraw consent, or raise a privacy grievance, email the privacy address above.
Security and international access
StoxSpace uses HTTPS, narrow Google permissions, short-lived in-memory tokens, access revocation, and browser security controls. No internet service can promise absolute security. Google and hosting providers may process technical data in other countries under their safeguards.
Children and changes
StoxSpace is intended only for people aged 18 or older. If this notice changes materially, its effective date and version will be updated and users will be asked to acknowledge the new version before reconnecting Google Drive.