⬡ InsiderEdge · Privacy Policy

Privacy Policy

Last updated: October 16, 2026 · Waymark Labs LLC, an Oregon limited liability company

InsiderEdge is built to minimize what we collect. We collect only what is necessary to run the service, we do not sell your data, and we do not use advertising trackers. This policy explains exactly what we collect, why, and how long we keep it.

1. Information We Collect
Account information
Email address, collected at signup via Supabase authentication. You may optionally set a display name (up to 30 characters); the community features that displayed it are currently switched off. We do not require or collect your legal name, phone number, or postal address.
Trade watchlist data
The insider trade signals you manually add to your watchlist: ticker, company, insider name, purchase price, shares, date, and notes. This data is stored in your Supabase account.
Watchlist annotations
Notes you attach to a tracked signal, and which alerts you have dismissed. Stored against your user id so they follow you across devices.
Score history
Snapshots of how a tracked signal's score changed over time, recorded when it moves. Used to draw the score-history chart on your own signals.
Congressional watchlist
The members of Congress you choose to follow, on any plan, so scans can be scoped to them.
Newsletter signup
If you sign up for InsiderEdge Weekly on our website, we store the email address you enter, the time, and the IP address it came from, and email you a link to confirm it. No account is needed. We send the newsletter only after you confirm.
Where you came from
The first time you visit, your browser notes how you arrived: the campaign tags in the link you followed (such as utm_source), the name of the website that sent you (the site only, never the full address of the page), the first page you opened, and the time. If you then create an account or sign up for the newsletter, that note is stored with it. We use it only to count which posts and partners bring people to InsiderEdge. It is not shared and is not used for advertising.
Payment information
Credit card and billing details are handled entirely by Stripe. InsiderEdge never sees or stores your raw card number.
Usage data
Basic server logs including IP addresses, request timestamps, and API endpoints called. Used for rate limiting, security monitoring, and debugging. When you open the app while signed in, we also note the date (not the time or what you looked at), so we can count how many people use InsiderEdge each day and week. Not sold or shared for advertising.
Disclaimer acknowledgment
When you first sign up, we record that you acknowledged the financial disclaimer. We store your email, IP address, user agent, timestamp, and disclaimer version as a legal audit record. Before your first AI analysis we ask you to confirm it is not financial advice, and record the same details against your account.
2. How We Use Your Information
Service delivery
To provide the InsiderEdge platform: scoring your watchlist, fetching market data, and displaying signal alerts.
Email alerts
If you are on a Starter or higher plan, we email you when any signal or cluster we detect crosses the strong-signal tier, and a weekly digest. These are sent to all paid subscribers — they are not limited to tickers on your watchlist, and we do not use your watchlist to decide who receives them. To stop receiving them, see “Opt-out of emails” below.
Newsletter
If you confirmed a newsletter signup, we email you InsiderEdge Weekly once a week: the week’s highest-scoring company insider purchases from SEC filings. It is sent from the same list whether or not you have an account. Every issue carries an unsubscribe link.
AI analysis
When you run AI signal analysis (Pro/Institutional), your trade data and market context are sent to Anthropic's API to generate the analysis. Anthropic's data handling is governed by their privacy policy.
Security and fraud prevention
IP addresses and request logs are used to enforce rate limits and detect abuse. We do not use this data for advertising or profiling.
Legal compliance
We may retain and disclose data as required by applicable law, court order, or to protect the rights and safety of InsiderEdge and its users.
3. Data Retention
Account data
Retained while your account is active and for up to 90 days after deletion, to allow recovery and to comply with legal obligations.
Trade watchlist
Deleted immediately upon your request or when you delete your account.
Notes, dismissals, score history, and congressional follows
Retained while your account is active, and deleted with your account.
Newsletter list
Kept until you ask us to delete it. Unsubscribing stops the emails straight away; to have the address removed from the list as well, email [email protected].
Server logs
Retained for up to 30 days for security and debugging purposes, then automatically purged.
Disclaimer records
Retained indefinitely as a legal audit trail documenting informed consent at signup.
Payment records
Stripe retains billing records per their own policies and applicable financial regulations.
4. Your Rights
Access
You may request a copy of the personal data we hold about you by contacting [email protected].
Deletion
You may clear your tracked trades at any time from the app. To delete your account entirely, email [email protected] from the address on the account and we will remove it, together with your watchlist, notes, dismissals, score history, and congressional follows. Disclaimer and AI analysis acknowledgment records are retained as described above, because they document consent that predates the deletion request.
Correction
You may update your email address through your Supabase account settings.
Portability
Starter and higher plans can export the watchlist as CSV from the Table view of the Watchlist tab; Pro and higher can also export JSON. You may request a copy in either format at any plan level by emailing [email protected].
Opt-out of emails
Every alert, digest and newsletter email carries an unsubscribe link; using it stops those emails to your address straight away. You can also email [email protected] to be removed and we will suppress your address within 10 business days, or cancel your paid plan to stop them entirely. We will still send transactional email about your account, security, and billing, which you cannot opt out of while the account exists.
5. Cookies and Tracking
Browser storage, not cookies
We do not set tracking cookies. To keep you signed in, the app stores your session token in your browser’s local storage, along with your display and alert preferences, a copy of your tracked signals for offline use, the time you accepted the disclaimer, and the note of how you first arrived (see “Where you came from”). This is strictly necessary for the service to work and is cleared when you sign out or clear site data.
No advertising trackers
We do not use Google Analytics, Facebook Pixel, or any third-party advertising trackers. We do not sell your data to advertisers.
No fingerprinting
We do not use browser fingerprinting or cross-site tracking technologies.
TradingView charts
Signal detail screens embed a price chart served by TradingView. When one loads, TradingView receives your IP address and browser details and may set its own cookies, under its own privacy policy. We receive nothing from it.
6. Security
Encryption in transit
All data is transmitted over HTTPS/TLS. HTTP connections are automatically redirected to HTTPS.
Server-side secrets
API keys (Anthropic, Stripe, Resend) are stored as server-side environment variables and are never exposed to the browser.
Row-level security
Supabase row-level security (RLS) policies ensure users can only access their own trade data.
Rate limiting
Per-user rate limits are enforced on all expensive API endpoints to prevent abuse and control costs.
7. Children's Privacy
Age requirement
InsiderEdge is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us at [email protected] and we will delete it promptly.
8. Changes to This Policy
Notification
We will notify active users by email if we make material changes to this Privacy Policy. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
9. Contact
Privacy inquiries
Operating entity
InsiderEdge is operated by Waymark Labs LLC, a limited liability company organized under the laws of the State of Oregon, United States. Oregon law governs this policy and our Terms of Service.
Postal address
5441 South Macadam Avenue · Portland, OR 97239 · United States
Third-Party Services

InsiderEdge uses the following third-party services. Each has its own privacy policy governing how they handle data we share with them.

Supabase
Database and authentication. Stores your account credentials and trade watchlist.
supabase.com/privacy
Stripe
Payment processing. Handles all billing and subscription management securely.
stripe.com/privacy
TradingView
Live price charts on signal detail screens. The chart loads from TradingView in your browser, so TradingView receives your IP address and browser details and may set its own cookies.
tradingview.com/privacy-policy
Anthropic
AI analysis engine (Pro/Institutional). Your trade data is sent to generate AI signal analysis on demand.
anthropic.com/privacy
Resend
Email delivery. Sends strong-signal alerts, the weekly newsletter, and account notifications.
resend.com/privacy
Cloudflare
DNS, WAF, and email routing. All traffic to insideredge.trade passes through Cloudflare, which processes IP addresses for security filtering, and mail to our published addresses is routed by Cloudflare Email Routing.
cloudflare.com/privacypolicy
Vercel
Hosting and infrastructure. Serves the application and processes serverless functions. Vercel Web Analytics counts page views: the page address (with any link tracking tags), the referring site, and your country, browser and device type. It uses no cookies and does not identify you.
vercel.com/legal/privacy-policy
Upstash
Rate limiting store (Redis). Holds short-lived request counters keyed by your account id or, for pages that need no sign-in, your IP address. Nothing else about you is stored there.
upstash.com/trust/privacy.pdf
Terms of Service · Scoring Methodology · ← Back to InsiderEdge