Privacy Policy

1. SCOPE

This Privacy Policy explains how [Insert registered entity / operator name] ("we", "us") processes personal data when you visit investorpass.vercel.app, create an account, subscribe, or use the Service. We collect only what the Service needs to function: there are no advertising networks or data brokers in this stack.

2. DATA WE COLLECT

• Account data: email address, optional display name, and a salted hash of your password. We never store plaintext passwords.
• Research activity: bookmarks, saved searches, collections, followed entities, research-resume state, and session items — stored so the Service can restore your context across visits.
• Product analytics: first-party event records (for example, search queries performed, features opened) optionally linked to your account identifier, used solely to improve retrieval quality and prioritize work.
• Subscription metadata: plan, status, currency, provider reference identifiers, and billing-period dates. Full payment details are handled exclusively by our payment processors (Razorpay, PayPal); we do not receive or store complete card numbers.
• Technical logs: standard server and hosting logs (including IP address and user agent) retained briefly for security and abuse prevention.

3. WHY WE PROCESS IT (LEGAL BASES)

• Performance of our contract with you: operating your account, entitlements, saved research, continuity features, and notifications.
• Legitimate interests: securing the Service, preventing abuse, understanding aggregate usage to improve the product.
• Consent: optional email digests and any non-essential communications; you may withdraw consent at any time.
• Legal obligations: retaining transaction records where law requires.

4. SHARING AND PROCESSORS

We do not sell personal data and do not share it for third-party advertising.

• Hosting and infrastructure: Vercel (application hosting) and Supabase (managed PostgreSQL).
• Payments: Razorpay and PayPal process payments under their own privacy terms.
• Email delivery (if you opt into digests): our email service provider sends messages on our instruction.
• Legal process: disclosure where required by law, court order, or to protect rights and safety.

5. COOKIES AND LOCAL STORAGE

We use a strictly necessary session cookie to keep you signed in, and local storage for preferences such as theme selection. No advertising or cross-site tracking cookies are used. Details: /legal/cookies.

6. RETENTION

Account and research data are retained while your account is active. On deletion, account data is removed within 30 days, except records we must retain for tax, fraud, or legal purposes (typically transaction metadata). Analytics events are retained in aggregate form; raw event linkage is minimized.

7. YOUR RIGHTS

Depending on your jurisdiction, you have rights to access, correct, export, delete, restrict, or object to processing of your personal data, and to lodge a complaint with a supervisory authority.

• EU/UK (GDPR): the rights listed above plus withdrawal of consent where processing relies on consent.
• India (Digital Personal Data Protection Act, 2023): rights to access, correction, erasure, grievance redressal, and nomination.
• California and other US states: we do not sell or share personal information as defined by CCPA/CPRA; you may request disclosure or deletion.
• Exercise any right by emailing contact@investorpass.app; we respond within statutory timelines.

8. SECURITY AND TRANSFERS

Data is encrypted in transit (TLS) and at rest by our managed database provider; passwords are hashed. No method is perfectly secure, but access to production data is restricted and logged. Where data crosses borders, we rely on appropriate safeguards provided by our processors.

9. CHILDREN

The Service is not directed at children under 13 (or under 16 in the EEA), and we do not knowingly collect their data. Contact us if you believe a minor has provided data.

10. CHANGES

Material changes to this policy will be announced on the Service with an updated date above.

CONTACT

Questions, requests, or notices under this document may be directed to contact@investorpass.app or to [Insert registered address]. Include enough detail for us to identify you and act on your request.