Security & privacy

Grants, schedules, alerts, and deadlines are visible only to your account. We never sell data, share it with employers, or expose it through invitations. Invites carry the company name only, never your share counts, values, or deadlines.

You can export everything as JSON or delete your account, immediately and permanently, from settings at any time.

All traffic is encrypted in transit (TLS, HSTS preload). Sessions use secure, HttpOnly cookies isolated to the app domain. Sign-in links are single-use and expire in 15 minutes; we never store passwords. Every data query is scoped to the owning account, and sensitive changes are audit-logged.

API credentials for our pricing source are server-only: they never reach your browser, our analytics, or our logs.

Your ExitCue account belongs to you, not your employer. A work email is only ever a company-verification credential: we send it one code, once, and never store or contact it again. Add a personal email or Google sign-in and your records, deadlines, and documents stay with you through every job change. Sensitive changes (a new primary email, account deletion, sharing) require a fresh sign-in, and you can review and revoke active sessions anytime.

Trusted Circle sharing is read-only and deny-by-default: a guest sees exactly the scopes you tick, nothing more. Access is checked on every request, so revocation takes effect immediately, and every view a guest makes is logged where you can see it. Invitations expire after seven days, and nothing shared is ever public, indexable, or guessable.

Verifying a company relationship never tells your employer anything, never makes a work address your login, and never opts you into benchmarking. Anonymous aggregation is a separate, versioned, revocable consent. Verification documents are used to extract the minimum needed for review and the file itself is purged.

We measure product usage to improve ExitCue, with a strict rule: exact share counts, strike prices, portfolio values, document contents, and tax inputs are never sent to analytics. Session replay is disabled on financial screens.

Apart from account-security messages, every notification requires your explicit opt-in, respects quiet hours, and can be disabled in one click.

Found a vulnerability? Email security@exitcue.com and we'll respond promptly.