Privacy Policy

Last updated: March 31, 2026

1. Introduction

Pipsight ("the App") is operated by OnFin.io. This Privacy Policy describes how we collect, use, and protect your data when you use the Pipsight web and mobile application.

2. Data We Collect

Account information: Email address and authentication credentials when you create an account.
Chat messages: Questions you send to the AI assistant and the AI-generated responses, stored to maintain your conversation history.
Usage data: Pages visited, features used, and technical information such as browser type and device information.
Analytics data: Anonymized interaction data collected via Google Tag Manager for product improvement.

3. AI Data Processing — Google Gemini

Pipsight uses the Google Gemini API to generate AI-powered market analysis. When you interact with the AI assistant:

Your chat messages and relevant market context are sent to Google's Gemini API for processing.
All data transmitted to Google Gemini is encrypted in transit using TLS.
Google's data usage policies for the Gemini API apply. Google does not use API data to train its models. See Google AI Terms.
We do not send your personal account information (email, password) to the AI provider — only the content of your query and anonymized market data.

4. AI-Generated Content Disclaimer

All analysis, patterns, and reference price levels provided by Pipsight are AI-generated for educational and informational purposes only. They do not constitute financial, investment, or trading advice. AI outputs may contain inaccuracies or "hallucinations." Users can report inaccurate responses via the in-app Report button on every AI response.

5. How We Use Your Data

To provide and improve the Pipsight service.
To maintain your chat history and session continuity.
To generate AI-powered market analysis via the Gemini API.
To communicate with you about your account or service updates.

6. Data Storage and Security

User data is stored in Supabase (PostgreSQL) with row-level security enabled.
All connections use HTTPS/TLS encryption.
Authentication tokens are securely managed via JWT.
We do not sell your personal data to third parties.

7. Third-Party Services

Pipsight integrates with the following third-party services:

Google Gemini API — AI analysis generation
Supabase — Authentication and data storage
Twelve Data / Finnhub — Real-time market data feeds
Google Tag Manager — Analytics

8. Your Rights

You may request to access, correct, or delete your personal data at any time by contacting us. You may also delete your account, which will remove your stored chat history and personal information.

9. Children's Privacy

Pipsight is not intended for users under 18 years of age. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

11. Contact

For questions about this Privacy Policy, contact us at support@onfin.io.