⬡ InsiderEdge · Privacy Policy

Privacy Policy

Last updated: May 29, 2026 · InsiderEdge LLC

InsiderEdge is built to minimize what we collect. We collect only what is necessary to run the service, we do not sell your data, and we do not use advertising trackers. This policy explains exactly what we collect, why, and how long we keep it.

1. Information We Collect
Account information
Email address collected at signup via Supabase authentication. We do not collect your name, phone number, or address.
Trade watchlist data
The insider trade signals you manually add to your watchlist: ticker, company, insider name, purchase price, shares, date, and notes. This data is stored in your Supabase account.
Payment information
Credit card and billing details are handled entirely by Stripe. InsiderEdge never sees or stores your raw card number.
Usage data
Basic server logs including IP addresses, request timestamps, and API endpoints called. Used for rate limiting, security monitoring, and debugging. Not sold or shared for advertising.
Disclaimer acknowledgment
When you first sign up, we record that you acknowledged the financial disclaimer. We store your email, IP address, user agent, timestamp, and disclaimer version as a legal audit record.
2. How We Use Your Information
Service delivery
To provide the InsiderEdge platform: scoring your watchlist, fetching market data, and displaying signal alerts.
Email alerts
If you are on a Starter or higher plan, we send email notifications when a trade in your watchlist reaches STRONG BUY tier. You can disable these in account settings.
AI analysis
When you run AI signal analysis (Pro/Institutional), your trade data and market context are sent to Anthropic's API to generate the analysis. Anthropic's data handling is governed by their privacy policy.
Security and fraud prevention
IP addresses and request logs are used to enforce rate limits and detect abuse. We do not use this data for advertising or profiling.
Legal compliance
We may retain and disclose data as required by applicable law, court order, or to protect the rights and safety of InsiderEdge and its users.
3. Data Retention
Account data
Retained while your account is active and for up to 90 days after deletion, to allow recovery and to comply with legal obligations.
Trade watchlist
Deleted immediately upon your request or when you delete your account.
Server logs
Retained for up to 30 days for security and debugging purposes, then automatically purged.
Disclaimer records
Retained indefinitely as a legal audit trail documenting informed consent at signup.
Payment records
Stripe retains billing records per their own policies and applicable financial regulations.
4. Your Rights
Access
You may request a copy of the personal data we hold about you by contacting [email protected].
Deletion
You may delete your account and all associated trade data at any time from Account Settings. Disclaimer acknowledgment records are retained for legal compliance.
Correction
You may update your email address through your Supabase account settings.
Portability
Institutional plan users can export their watchlist in CSV or JSON format from the Trades tab.
Opt-out of emails
You may disable email alerts at any time from Account Settings. We will still send transactional emails related to your account and billing.
5. Cookies and Tracking
Session cookies
Supabase sets a session cookie to keep you logged in. This is strictly necessary for the service to function.
No advertising trackers
We do not use Google Analytics, Facebook Pixel, or any third-party advertising trackers. We do not sell your data to advertisers.
No fingerprinting
We do not use browser fingerprinting or cross-site tracking technologies.
6. Security
Encryption in transit
All data is transmitted over HTTPS/TLS. HTTP connections are automatically redirected to HTTPS.
Server-side secrets
API keys (Finnhub, Anthropic, Stripe, Resend) are stored as server-side environment variables and are never exposed to the browser.
Row-level security
Supabase row-level security (RLS) policies ensure users can only access their own trade data.
Rate limiting
Per-user rate limits are enforced on all expensive API endpoints to prevent abuse and control costs.
7. Children's Privacy
Age requirement
InsiderEdge is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us at [email protected] and we will delete it promptly.
8. Changes to This Policy
Notification
We will notify active users by email if we make material changes to this Privacy Policy. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
9. Contact
Privacy inquiries
[email protected] · InsiderEdge LLC
Third-Party Services

InsiderEdge uses the following third-party services. Each has its own privacy policy governing how they handle data we share with them.

Supabase
Database and authentication. Stores your account credentials and trade watchlist.
supabase.com/privacy
Stripe
Payment processing. Handles all billing and subscription management securely.
stripe.com/privacy
Finnhub
Market data provider. Supplies live stock quotes and analyst targets.
finnhub.io/privacy
Anthropic
AI analysis engine (Pro/Institutional). Your trade data is sent to generate AI signal analysis on demand.
anthropic.com/privacy
Resend
Email delivery. Sends STRONG BUY signal alerts and account notifications.
resend.com/privacy
Vercel
Hosting and infrastructure. Serves the application and processes serverless functions.
vercel.com/legal/privacy-policy
Upstash
Rate limiting store (Redis). Tracks API call counts to enforce per-user rate limits. No personal data stored.
upstash.com/trust/privacy.pdf
Terms of Service · Scoring Methodology · ← Back to InsiderEdge