PRIVACY

Privacy, in plain English.

We collect the minimum information needed to run a source-linked research workspace.

Account and workspace data

When you sign in, the hosting platform provides a site-specific account identifier, email address, and optionally a display name. We store the identifier with saved ideas, validation notes, alert and report preferences, plan status, and feedback you submit.

Public research data

Editorial research may store a public source URL, publication date, source name, minimal attributed excerpt, and reviewer analysis. We do not intentionally collect private, gated, or sensitive personal data for opportunity cards.

Service providers

Cloudflare hosts the application and database. Stripe processes paid subscriptions; payment card details do not pass through our servers. Resend delivers requested reports, alerts, and support notifications. Official public feeds and embeds are used for keyless source intake; authenticated source APIs are used only when configured under their applicable terms.

How we use and retain data

We use data to provide the workspace, deliver requested messages, administer subscriptions, prevent misuse, address corrections and removals, and improve research quality. We do not sell personal information. Workspace data is retained while the account is active or as needed for legitimate legal and operational purposes.

Your choices

Account settings let you download your account data, pause reports, manage billing, and delete workspace data. Account deletion removes saves, validation notes, alerts, report preferences, and the local subscription record; submitted feedback is anonymized so the review history remains auditable. You may also submit an access, correction, removal, or privacy request.

International processing and security

Providers may process data in countries other than yours. We use authenticated access, server-side authorization, signed billing webhooks, least-privilege source credentials, and encrypted provider connections, but no online service can promise absolute security.

Contact

Use the privacy request form. A configured support address receives the request without exposing that address to automated harvesting.

Effective: August 12, 2026. This policy should be reviewed for the operator’s jurisdiction before commercial launch.