Back to Tilelli

Privacy Policy

Effective Date: August 22, 2026 — Last Updated: August 22, 2026

Tilelli Wealth Systems LLC ("Tilelli," "we," "us," or "our") operates Tilelli Stock Insights (the "Service"). This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your personal data. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address, display name, and a hashed version of your password (if you use email/password authentication). If you sign in through a third-party provider such as Google, we receive your name, email address, and profile image as provided by that service. We never receive or store your Google password.

1.2 Portfolio Data

You may voluntarily enter portfolio information into the Service, including stock symbols, share quantities, cost-basis information, account names, and transaction records. This data is stored in our database solely to provide you with portfolio analytics, reporting, and AI-generated insights. We do not connect to any brokerage account. All portfolio data in the Service is manually entered or imported by you.

1.3 Usage Data

We automatically collect certain information about how you interact with the Service, including:

  • Pages visited and features used.
  • AI feature usage (number of requests, token counts for cost management).
  • Timestamps of activity (login, last active, feature use).
  • Device type, browser type, and general location (derived from IP address).

We use this data to maintain usage caps, monitor system health, improve the Service, and detect abuse.

1.4 Payment Information

Subscription payments are processed by Stripe, Inc. We do not directly collect, store, or have access to your full credit card number. Stripe collects and processes your payment information in accordance with its own Privacy Policy. We receive only a Stripe customer ID, subscription status, and billing cycle information necessary to manage your subscription.

1.5 Support and Feedback

If you submit a support request, feedback, or message through the Service's support and live chat features, we store the content of your message, your email address, any star rating you provide, and any file attachments you upload. This information is used to respond to your inquiry and improve the Service.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide the Service: Deliver portfolio tracking, market data, AI-generated analyses, reports, and other core features.
  • Manage your account: Authenticate you, manage your subscription, and communicate with you about your account.
  • Improve the Service: Analyze usage patterns, monitor system performance, and develop new features.
  • Owner usage monitoring: As described in our Terms of Service, the Service owner monitors aggregate AI usage metrics and system health to ensure quality of service and manage costs. Individual portfolio holdings and financial data are not reviewed unless required for technical support purposes with your explicit consent.
  • Enforce our Terms: Detect and prevent fraud, abuse, and violations of our Terms of Service and Acceptable Use Policy.
  • Legal compliance: Respond to legal requests and comply with applicable laws.

3. Data Storage and Security

Your data is stored on secured, managed cloud infrastructure provided by our hosting partner. We employ industry-standard security measures, including:

  • Encrypted database connections.
  • Password hashing with bcrypt (12 rounds).
  • HTTPS/TLS encryption for all data in transit.
  • Session management with secure, HTTP-only cookies.
  • Rate limiting and abuse prevention on authentication and API endpoints.
  • Account blocking capabilities for compromised or abusive accounts.

While we implement robust safeguards, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

4. Third-Party Processors

We share data with the following categories of third-party service providers, solely as necessary to provide the Service:

  • Payment processing: Stripe, Inc. processes subscription payments. We share your email and subscription plan information with Stripe.
  • AI inference: AI-generated content (reports, analyses, chat responses, portfolio suggestions) is produced by sending prompts — which may include your portfolio data — to our AI inference platform. The AI platform processes data in real time and does not retain your data beyond the scope of generating a response.
  • Cloud hosting and storage: Our hosting provider stores application data, including your portfolio information and uploaded files, on managed infrastructure.
  • Analytics: We may use Google Analytics to collect anonymized usage metrics. Google Analytics uses cookies to track page views and general usage patterns. No personally identifiable financial data is sent to Google Analytics.

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

5. Cookies and Local Storage

The Service uses a limited number of cookies and browser local storage entries:

  • Session cookie: A secure, HTTP-only session token that authenticates your login. Essential for the Service to function.
  • Theme and display preferences: Your selected appearance (dark/light mode) and text size are stored in local storage so your preferences persist across sessions.
  • Client-side caching: Certain non-sensitive market data (stock quotes, watchlist selections) may be temporarily stored in local storage to improve perceived loading speed.
  • Analytics cookies: If Google Analytics is enabled, it places cookies to track anonymized usage. You can opt out of Google Analytics by using browser-level cookie controls or a Google Analytics opt-out extension.

We do not use cookies for advertising or cross-site tracking.

6. Your Rights

You have the following rights regarding your personal data:

  • Access: You may request a copy of the personal data we hold about you by contacting us at the email below.
  • Correction: You may update your account information through the Service at any time. For corrections to other data, contact us.
  • Deletion: You may request that we delete your account and all associated data. Upon deletion, your portfolio data, usage history, transaction records, chat messages, and other account-specific information will be permanently removed. Certain data may be retained as required by law or for legitimate business purposes (e.g., aggregated, anonymized analytics data). To request account deletion, contact us at the email below.
  • Data portability: You may export your portfolio holdings as a CSV file through the Service at any time.

7. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, your account data is retained in case you choose to resubscribe; however, you may request full deletion at any time. Unverified free-tier accounts that have not completed email verification are automatically deleted after seven (7) days.

Aggregated, anonymized data (such as total user counts and system-wide usage metrics) may be retained indefinitely and is not linked to any individual account.

8. Children's Privacy

The Service is not directed at, and is not intended for, children under the age of thirteen (13). We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly. If you believe a child under 13 has provided us with personal data, please contact us immediately.

9. State Privacy Rights (CCPA and VCDPA)

9.1 California Consumer Privacy Act (CCPA)

If you are a California resident, you have the right to: (a) know what personal information we collect, use, and disclose about you; (b) request deletion of your personal information; (c) opt out of the "sale" of your personal information — we do not sell your personal information; and (d) not be discriminated against for exercising your privacy rights. To exercise any of these rights, contact us at [email protected].

9.2 Virginia Consumer Data Protection Act (VCDPA)

If you are a Virginia resident, you have the right to: (a) access, correct, and delete your personal data; (b) obtain a portable copy of your data; and (c) opt out of the processing of your data for targeted advertising, sale, or profiling — we do not engage in any of these activities. To exercise your rights, contact us at the email below.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by email, through the Service, or by updating the "Last Updated" date at the top of this page. Your continued use of the Service after such notice constitutes your acceptance of the revised policy.

11. Contact for Privacy Requests

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: