Privacy Policy

InvestJournal MCP Server

Effective Date: May 7, 2026 · Last Updated: July 30, 2026

1. Introduction

InvestJournal ("we", "our", "us") operates an MCP (Model Context Protocol) server that allows AI assistants like Claude to access your stock research data. This privacy policy explains what data is accessed, how it is used, and your rights.

2. Data We Access

When you connect to the InvestJournal MCP server, the following data from your InvestJournal account may be accessed by the AI assistant on your behalf:

Data Type	Read	Write	Destructive	Tools
Stocks	✓	✓ (admin only)	✓ (admin only)	`GetStockSummary`, `ListStocks`, `SearchStocks`, `AddStock`, `EditStock`, `DeleteStock`
Market prices (shared market data, not user data)	✓	—	—	`GetPriceHistory`, `GetLatestPrice`
DCF Valuations	✓	✓	✓	`GetDcfValuations`, `GetLatestDcf`, `CalculateDcf` (stateless), `SaveDcfValuation`, `DeleteDcfValuation`, `SetDcfVerdict`
Financial Ratios	✓	✓ (admin only)	✓ (admin only)	`GetStockRatios`, `AddFinancialRatio`
My Data (your own custom metrics, e.g. backlog or store count — private to your account)	✓	✓	✓	`AddMyMetrics`, `GetMyMetrics`, `DeleteMyMetric`, and the `yourMetrics` section of `GetStockRatios`
News (press releases)	✓	✓ (admin only)	✓ (admin only)	`ListNews`, `AddNewsItem`, `EditNewsItem`, `DeleteNewsItem`, `ReportNewsDigest`
Watchlists	✓	✓	✓	`ListWatchlists`, `GetWatchlistStocks`, `GetWatchlistRatioRanking`, `GetWatchlistStocksWithLatestRatios`, `AddStockToWatchlist`, `RemoveStockFromWatchlist`, `CreateWatchlist`, `ArchiveWatchlist`, `RenameWatchlist`, `SetWatchlistFavorite`
Comments / Notes	✓	✓	✓	`GetStockComments`, `SearchComments`, `AddStockComment`, `EditStockComment`, `SetCommentPrivacy`, `DeleteStockComment`
Investment Theses	✓	✓	✓	`GetThesis`, `UpsertThesis` (replaces the current thesis text; prior versions are kept as revision history)
Alerts	✓	✓	✓	`ListAlerts`, `CreateAlert`, `UpdateAlert`, `SetAlertEnabled`, `DeleteAlert`
Documents (PDF metadata + RAG)	✓	—	—	`ListDocuments`, `AskDocument`
OAuth sessions & account identity	✓	—	✓	`WhoAmI` (email, user ID, admin status of the signed-in account), `LogoutFromMcp`

Tools that modify your data (watchlists, DCF valuations, comments, investment theses, alerts, ratios, news, custom metrics) are explicitly marked as such in the MCP tool catalog (destructiveHint: true for delete/replace; readOnlyHint: false for additive create). Your AI assistant will surface these distinctions when proposing actions. AddFinancialRatio, AddNewsItem, EditNewsItem, DeleteNewsItem, AddStock, EditStock, DeleteStock, and ReportNewsDigest are admin-only and reject calls from non-admin users.

3. Third-Party Services

The InvestJournal MCP server calls the following third-party APIs:

Google Gemini API — Used exclusively by the AskDocument tool to perform RAG (Retrieval-Augmented Generation) queries on your uploaded PDFs. When you use this tool, your question and relevant document chunks are sent to Google's Gemini API to generate an answer. Google's privacy policy applies to this data: Google Privacy Policy.
GitHub — Used exclusively by the admin-only ReportNewsDigest tool, which files an issue in our private repository summarising the leftovers of a news-ingestion run and that run's own statistics (counts of items inserted, duplicates skipped, and sources swept). The issue contains public press-release metadata and run counts only — never personal user data.

No other third-party services receive your data through the MCP server.

4. Data Storage

Your data is stored in a PostgreSQL database hosted on Railway.
Document embeddings for RAG are stored in a pgvector database also hosted on Railway.
All data is stored in Railway's infrastructure within their standard security practices.
The MCP server itself does not store any additional data beyond what is already in your InvestJournal account.

5. Data Retention

Your data is retained as long as your InvestJournal account is active. If you delete your account, all associated data (stocks, valuations, watchlists, comments, investment theses, alerts, custom metrics, documents, and embeddings) will be deleted.

OAuth refresh tokens issued to your AI client are retained for up to 30 days from issuance, with rotation on each use. You can revoke active sessions at any time via https://mcp.investjournal.io/sessions or by calling the LogoutFromMcp tool.

6. Data Sharing

We do not sell, trade, or share your personal data with third parties, except:

Google Gemini API — as described in Section 3, only when you explicitly use the AskDocument tool.
Legal requirements — if required by law or to protect our rights.

7. Security

All connections to the MCP server are encrypted via TLS/HTTPS.
Database connections use encrypted channels.
Authentication is required for remote access (via OAuth 2.0 + PKCE for HTTP transport).
OAuth signing keys are rotated on operator schedule (minimum: when staff with key access changes).
Refresh-token reuse is detected automatically (a stolen and rotated token triggers family revocation).
The /register endpoint is rate-limited to 5 requests per IP per hour to prevent registration spam.
The /mcp endpoint is rate-limited per authenticated user (default 60 calls/minute) to protect downstream services from runaway clients.

8. Your Rights

You have the right to:

Access your data through the InvestJournal application
Delete your account and all associated data
Restrict MCP access by disconnecting the server from your AI assistant

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected by updating the "Last Updated" date at the top of this document.

10. Contact

If you have questions about this privacy policy, please contact us at:

Email: [email protected]
Website: https://investjournal.io