Privacy Policy

InsiderWatch collects only what it needs to run an alert service. The complete inventory:

• Account data, held by Clerk, our authentication provider: your name, email address, a password hash if you use password sign-in, your Google account link if you use Google sign-in, session cookies, and CAPTCHA verification data.
• Subscription data, stored in our Neon Postgres database and mirrored to Vercel Blob storage (with daily backups retained for 30 days): your email address, plan, Stripe customer ID, phone number, Telegram chat ID if you link a chat, alert preferences including your watchlist tickers, and a manage-page token.
• Phone number: collected by Stripe at checkout and used for account verification and support only. We do not send automated text messages.
• Payment data: handled entirely by Stripe. We never see or store full card numbers.
• First-party analytics: a pageview beacon records aggregate page counts only. No IP address, no identifiers, no cross-site tracking, no ads, no data sales.
• Cookies: Clerk session cookies for authentication, an admin session cookie used only by site operators, and Stripe cookies during checkout. No advertising cookies.

• Deliver alerts: send you the alerts and service communications your plan and preferences select, by email, Telegram, and push where enabled.
• Billing: process payments and manage your trial and subscription through Stripe.
• Support: respond to your requests and verify your account when you contact us.
• Service integrity: keep accounts secure, prevent abuse, and diagnose technical issues.

We do not sell your personal information, and we do not send marketing unrelated to the service you subscribed to.

Email: alerts are sent through Resend. Alert emails contain a personal manage link: anyone with the link can view and change your alert preferences, so treat it like a password and do not forward alert emails without sharing it.

Telegram: optional. A chat is linked only when you open the connect link from your own dashboard and start the chat; that action is the opt-in. Send /stop in the chat or use Disconnect in the dashboard to unlink at any time.

Push: if you use the mobile app, Expo delivers push notifications; a web push pilot may deliver browser notifications where you enable them.

Discord: a Discord mirror may carry alert content for community distribution. It carries no personal data.

We do not send automated text messages. The phone number Stripe collects at checkout is used for account verification and support only.

We use the following providers to operate InsiderWatch:

• Clerk: account authentication (name, email, password hash, Google sign-in, sessions, CAPTCHA).
• Stripe: payment processing and subscription management, including the phone number collected at checkout.
• Neon: database hosting for subscriber records.
• Vercel: cloud hosting and Blob storage, including the subscriber mirror and daily backups.
• Resend: email delivery. Your email address is transmitted to Resend for sending.
• Telegram: alert delivery for subscribers who link a chat. Only the chat identifier and the alert text are transmitted; we never send Telegram your email address or phone number.
• Expo: mobile push delivery when the mobile app is used (push token, platform, device name). Web push endpoints are stored for the web push pilot.
• Anthropic: alert content is generated by sending public source material (filings, disclosures, press releases) to Anthropic’s Claude API. Subscriber personal data is never sent to the AI.

A Discord mirror may carry alert content, which contains no personal data. We do not sell or rent personal data, and we use no third-party advertising.

We keep your subscription data for the lifetime of your active subscription. When you cancel, the Stripe webhook deletes your subscriber record; your login account persists until you delete it in the dashboard (Account tab). Deleting your account removes your login, your subscription record, and your registered devices.

Backups age out within 30 days, so deleted data leaves the backup set on that schedule.

You can access, correct, and delete your data through the dashboard (Account tab) or by emailing privacy@insiderwatch.ai. We honor deletion requests regardless of jurisdiction.

EU and UK residents: our legal bases for processing are performance of our contract with you and our legitimate interest in operating and securing the service. You may lodge a complaint with your supervisory authority.

California residents: the categories listed in What We Collect are the complete CCPA inventory of personal information we collect. We do not sell or share personal information as defined by the CPRA, including for cross-context behavioral advertising. You may exercise your rights to know, delete, and correct via privacy@insiderwatch.ai; we will not discriminate against you for doing so.

We protect your data with encryption in transit, access controls, log redaction, and signed admin sessions. No method of transmission or storage is 100% secure. If a breach affects your personal data, we will notify affected users as required by law.

InsiderWatch is for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, contact us at privacy@insiderwatch.ai and we will delete it promptly.

InsiderWatch is operated from the United States, and your data is processed in the United States. By using the service, you understand that your data is transferred to and processed there.

We may update this policy as the service evolves. Updates are posted on this page with a new date, and material changes are announced on the site. Continued use after a change constitutes acceptance.

Questions about this policy or your data: privacy@insiderwatch.ai.