Privacy Policy

1. Introduction

CSI Picks ("we," "us," or "our") operates the csipicks.com website and the CSI Picks mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use the Service.

2. Information We Collect

Account information. When you create an account we collect your email address, display name, and a hashed password managed by AWS Cognito. If you choose to sign in with a passkey, we store a public-key credential identifier associated with your device — we never receive or store your biometric data.

Picks and activity. We store the stock picks you submit (symbol, rating, optional notes) along with timestamps and computed performance data. Active picks and your aggregate returns are displayed publicly on the leaderboard under your chosen display name.

Device and usage data. We automatically collect limited technical data including IP address, device type, operating system version, and general usage analytics to maintain service quality and security. We do not use third-party advertising trackers.

3. How We Use Your Information

We use the information we collect to operate and improve the Service, authenticate your identity, compute and display leaderboard rankings, communicate important service updates, and ensure platform security. We do not sell your personal information to third parties.

4. Third-Party Services

The Service relies on the following third-party providers to function:

Amazon Web Services (AWS). Our backend infrastructure — including authentication (Cognito), database (DynamoDB), and hosting (CloudFront, Lambda) — runs on AWS. Data is stored in the US East (Ohio) region. AWS processes data in accordance with their privacy notice and our data processing agreement.

Finnhub. We retrieve stock price data from Finnhub's market-data API. No personally identifiable information is shared with Finnhub.

Apple (iOS App). If you use the CSI Picks iOS app, Apple may collect certain diagnostics and usage data as described in Apple's Privacy Policy. We do not receive identifiable data from Apple beyond what you provide through the app.

5. Data Retention

We retain your account data and pick history for as long as your account is active. If you request account deletion, we will remove your personal information within 30 days. Anonymized, aggregate performance data may be retained for leaderboard integrity.

6. Data Security

We protect your data using industry-standard measures including encrypted data transmission (TLS), secure password hashing via AWS Cognito, and access controls on our cloud infrastructure. No method of electronic storage is 100% secure, but we take reasonable steps to protect your information.

7. Your Rights

You may access, update, or delete your account information at any time through the Profile section of the Service. You may also contact us to request a copy of your data or to ask questions about this policy.

8. Children's Privacy

The Service is not directed to anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy, contact us at privacy@csipicks.com.