Privacy
Privacy Notice
This notice explains what StoxSpace processes, why it is needed, and the choices you have.
Effective 10 September 2026
Who is responsible
StoxSpace is operated by Chetan Naik, trading as StoxSpace, in Bengaluru, Karnataka, India. For privacy questions or grievances, email privacy@stoxspace.com.
What StoxSpace processes
- Invite-only access: your approved email address, access decision, and essential session information are processed by Cloudflare Access to verify that you may open the workspace.
- Google Drive authorization: a short-lived access token using Google's limited per-file permission. The current app uses it only with files it creates and marks as StoxSpace data.
- Your workspace content: stock symbols, company names, ratings, notes, watchlists, trading capital and risk preferences, planned trades, executions, checklists, principles, and weekly reviews that you enter.
- Device preferences: your light or dark theme and the version of the legal notice you accepted, stored in your browser.
- Technical delivery data: the hosting and network providers may process limited information such as IP address, browser type, request time, and security events to deliver and protect the site.
- Support messages: information you choose to email to StoxSpace when requesting help.
What StoxSpace does not collect
The Google Drive connection does not request your Google name, email address, profile photo, contacts, or access to all files in your Drive. Your invited email is used separately by Cloudflare Access only for authentication and access control. StoxSpace has no application database for your research or journal, and it does not use advertising, analytics, session replay, or marketing trackers.
How and why data is used
Workspace content is processed in your browser to provide the stock review, watchlist, risk planning, checklist, and journal features you request. It is then saved to a StoxSpace JSON file in your Google Drive. StoxSpace uses Google API data only to provide visible features and does not sell or use it for advertising.
Google Drive and other services
Cloudflare verifies invited email addresses, manages the access session, and protects the workspace route. Google separately processes Drive authorization and stores the StoxSpace file under your Google account. Selecting a TradingView or Screener research link opens that provider in a separate tab; their own privacy terms then apply.
Storage and retention
- Your workspace remains in Google Drive until you delete it.
- Invited email addresses remain on the access allowlist until access is removed. Cloudflare retains access and security records according to the configured account settings and applicable law.
- The Google access token stays in browser memory only and is removed on refresh, sign-out, expiry, or tab closure.
- Theme and legal-acceptance preferences remain on your device until you clear them or browser storage.
- Support correspondence is normally deleted within 12 months after the request is resolved, unless law requires longer retention.
Your choices and rights
You can view and correct your content inside StoxSpace, download a complete JSON copy, revoke Google access, clear device preferences, and permanently delete all StoxSpace-marked Drive data from Privacy & data settings. You can also manage app access in your Google Account. To request assistance, withdraw consent, or raise a privacy grievance, email the privacy address above.
Security and international access
StoxSpace uses HTTPS, narrow Google permissions, short-lived in-memory tokens, access revocation, and browser security controls. No internet service can promise absolute security. Google and hosting providers may process technical data in other countries under their safeguards.
Children and changes
StoxSpace is intended only for people aged 18 or older. If this notice changes materially, its effective date and version will be updated and users will be asked to acknowledge the new version before reconnecting Google Drive.