Privacy policy

The short version

Rook keeps what it needs to run your account and show your own work back to you. It doesn't sell your information, show ads, or use tracking or advertising cookies.

What we keep

• Your account: your email address, your password (stored only as a one-way scrambled form we cannot read), your invitation, and when you accepted these terms.
• Signing in: one cookie that keeps you signed in for up to 31 days, plus a security code that protects your forms. Rook uses no other cookies.
• Your work: your watchlist, alert and trade-plan drafts, your daily check-in date, and your portfolio: holdings, transactions, cash, settings and weekly reviews.
• Connected accounts, if you add them: public wallet addresses, read-only exchange keys (stored encrypted) and the balances read from them.
• Saved in your browser only: Research notes and watchlists, chart layouts and drawings, and the last news collection you opened. They stay on that device, kept apart for each account.
• Server records: like any website, our server briefly records basic request details, such as your network address, to keep Rook secure and running.

Who else is involved

• Hosting: Rook runs on servers rented from a hosting company, which stores this information for us.
• Market data from our server: our server fetches public information from sources such as the U.S. SEC, Coinbase, Yahoo Finance and public blockchain networks. When you connect an account, our server reads it with the access you gave. Those requests come from Rook, not from your device.
• Market data in your browser: to draw live charts, your browser connects directly to exchanges such as Binance, Coinbase, OKX, Bybit and Hyperliquid. Like any website, they can see your network address.
• Links: headlines and filings link to their publishers. Their own privacy policies apply when you visit them.

We don't sell or rent your information, and we don't share it with advertisers. We would share it only if the law requires it.

How long we keep it

We keep your information while your account exists. If you ask us to delete your account, we delete it from Rook. Copies in our backups are removed as those backups expire, within 30 days.

Keeping it safe

Rook uses encrypted connections (HTTPS), stores passwords only in scrambled form, encrypts connected-account keys, and never accepts access that could trade or withdraw. No website can promise perfect security, so please use a strong password that you don't use anywhere else.

Your choices

You can see and change your own work in Rook. To get a copy of your information, correct it or delete your account, email hello@rookinvest.com. Rook is not meant for anyone under 18.

Changes

If this policy changes, the date above changes, and we will tell members about important changes.