← Back to dashboard

Privacy Policy

Last updated: April 21, 2026

1. Information We Collect

Account information: When you sign up, we collect your email address and a hashed password. We do not store plaintext passwords.

Usage data: We store scan results, watchlist items, notes, and tracker data that you create within the Service. This data is associated with your account.

Payment information: Payment processing is handled by Stripe. We do not store credit card numbers or bank details on our servers. Stripe's privacy policy governs their handling of your payment information.

2. How We Use Your Information

We use your information to: (a) provide and operate the Service; (b) process payments; (c) send email digests and alerts you have configured; (d) improve the Service.

3. Data Storage

Your data is stored in Supabase (hosted on AWS infrastructure). All data is encrypted in transit (TLS) and at rest. Database access is protected by Row Level Security policies ensuring users can only access their own data.

4. Third-Party Services

We use the following third-party services:

  • Supabase — database and authentication
  • Stripe — payment processing
  • Anthropic (Claude) — AI analysis of SEC filings
  • Vercel — application hosting
  • Inngest — background job processing
  • Resend — email delivery

Each service has its own privacy policy governing data they process on our behalf.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share data when required by law or to protect our rights.

6. Cookies & Analytics

We use essential cookies for authentication session management. We do not use tracking or advertising cookies.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

8. Your Rights

You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) request deletion of your data; (d) export your data. Contact us to exercise these rights.

9. Security

We implement industry-standard security measures including encryption, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

10. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the Service.

12. Contact

For privacy questions or data requests, email us at privacy@pivotswan.com.