Privacy Policy

Last updated: June 2026 · The Resource Heatmap

This Privacy Policy describes how The Resource Heatmap ("we", "our", or "us") collects, uses, and protects your personal information when you use our service at theresourceheatmap.com.

1. Information We Collect

Data	Why we collect it	Where it's stored
Email address	Account creation, login, and confirmation emails	Supabase Auth (encrypted)
Password	Account authentication	Supabase Auth (bcrypt hashed — never stored in plain text)
Sentiment votes	Community sentiment feature (Bullish / Neutral / Bearish per company)	Supabase database
Comments	Community discussion feature	Supabase database (publicly readable)
Favourites	Save companies to your account	Supabase database (private to your account)

We do not collect payment information, phone numbers, or physical addresses. We do not use advertising trackers or sell your data to third parties.

2. How We Use Your Information

To authenticate your account and maintain your session
To display your community contributions (comments, sentiment votes) to other users
To save your favourites and preferences across sessions
To send transactional emails (account confirmation, password reset) — no marketing emails

3. Data Sharing

We do not sell or share your personal data with third parties for marketing purposes. We use the following third-party services to operate the platform:

Supabase — database and authentication (Canada/US data centres)
Vercel — web hosting and serverless functions (US data centres)
Mapbox — interactive map rendering (tile requests only, no account data sent)
Financial Modeling Prep — market price data (no user data sent)
Anthropic Claude — AI analysis feature (company ticker only, no user data sent)

4. Community Content

Comments and sentiment votes are associated with an internal user ID (a pseudonymous UUID) and are publicly readable by other users of the platform. Your email address is never displayed publicly. If you post a comment, other users will see the comment text but not your email.

5. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all associated data (comments, sentiment votes, favourites) is permanently removed. We do not retain backups of deleted account data beyond our standard backup window.

6. Your Rights

You have the right to:

Access — request a copy of the data we hold about you
Correction — update your email address via account settings
Erasure — delete your account and all associated data
Portability — request an export of your data

To exercise any of these rights, contact us at privacy@theresourceheatmap.com.

7. Security

We use industry-standard security measures including HTTPS encryption, httpOnly session cookies, bcrypt password hashing, and row-level security policies on our database. No system is 100% secure — if you suspect a security issue, please contact us immediately.

8. Children

The Resource Heatmap is not directed at children under the age of 18. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy questions or data requests, contact us at:
privacy@theresourceheatmap.com

The Resource Heatmap · theresourceheatmap.com · For informational purposes only. Not financial advice.