⬡ InsiderEdge · Privacy Policy

Privacy Policy

Last updated: September 8, 2026 · Waymark Labs LLC, an Oregon limited liability company

InsiderEdge is built to minimize what we collect. We collect only what is necessary to run the service, we do not sell your data, and we do not use advertising trackers. This policy explains exactly what we collect, why, and how long we keep it.

1. Information We Collect
Account information
Email address, collected at signup via Supabase authentication. You may optionally set a display name (up to 30 characters) shown on community contributions. We do not require or collect your legal name, phone number, or postal address.
Trade watchlist data
The insider trade signals you manually add to your watchlist: ticker, company, insider name, purchase price, shares, date, and notes. This data is stored in your Supabase account.
Watchlist annotations
Notes you attach to a tracked signal, and which alerts you have dismissed. Stored against your user id so they follow you across devices.
Score history
Snapshots of how a tracked signal's score changed over time, recorded when it moves. Used to draw the score-history chart on your own signals.
Congressional watchlist
The members of Congress you choose to follow, on Pro plans, so scans can be scoped to them.
Payment information
Credit card and billing details are handled entirely by Stripe. InsiderEdge never sees or stores your raw card number.
Usage data
Basic server logs including IP addresses, request timestamps, and API endpoints called. Used for rate limiting, security monitoring, and debugging. Not sold or shared for advertising.
Disclaimer acknowledgment
When you first sign up, we record that you acknowledged the financial disclaimer. We store your email, IP address, user agent, timestamp, and disclaimer version as a legal audit record.
2. How We Use Your Information
Service delivery
To provide the InsiderEdge platform: scoring your watchlist, fetching market data, and displaying signal alerts.
Email alerts
If you are on a Starter or higher plan, we email you when any signal or cluster we detect crosses the strong-signal tier, and a weekly digest. These are sent to all paid subscribers — they are not limited to tickers on your watchlist, and we do not use your watchlist to decide who receives them. To stop receiving them, see “Opt-out of emails” below.
AI analysis
When you run AI signal analysis (Pro/Institutional), your trade data and market context are sent to Anthropic's API to generate the analysis. Anthropic's data handling is governed by their privacy policy.
Security and fraud prevention
IP addresses and request logs are used to enforce rate limits and detect abuse. We do not use this data for advertising or profiling.
Legal compliance
We may retain and disclose data as required by applicable law, court order, or to protect the rights and safety of InsiderEdge and its users.
3. Data Retention
Account data
Retained while your account is active and for up to 90 days after deletion, to allow recovery and to comply with legal obligations.
Trade watchlist
Deleted immediately upon your request or when you delete your account.
Notes, dismissals, score history, and congressional follows
Retained while your account is active, and deleted with your account.
Server logs
Retained for up to 30 days for security and debugging purposes, then automatically purged.
Disclaimer records
Retained indefinitely as a legal audit trail documenting informed consent at signup.
Payment records
Stripe retains billing records per their own policies and applicable financial regulations.
4. Your Rights
Access
You may request a copy of the personal data we hold about you by contacting [email protected].
Deletion
You may clear your tracked trades at any time from the app. To delete your account entirely, email [email protected] from the address on the account and we will remove it, together with your watchlist, notes, dismissals, score history, and congressional follows. Disclaimer acknowledgment records are retained as described above, because they document consent that predates the deletion request.
Correction
You may update your email address through your Supabase account settings.
Portability
Starter and higher plans can export the watchlist as CSV from the Trades tab; Pro and higher can also export JSON. You may request a copy in either format at any plan level by emailing [email protected].
Opt-out of emails
Alert and digest emails currently go to every active paid subscriber, and the app does not yet offer a self-service toggle. Email [email protected] to be removed from them and we will suppress your address, or cancel your paid plan to stop them entirely. We will still send transactional email about your account, security, and billing, which you cannot opt out of while the account exists.
5. Cookies and Tracking
Session cookies
Supabase sets a session cookie to keep you logged in. This is strictly necessary for the service to function.
No advertising trackers
We do not use Google Analytics, Facebook Pixel, or any third-party advertising trackers. We do not sell your data to advertisers.
No fingerprinting
We do not use browser fingerprinting or cross-site tracking technologies.
6. Security
Encryption in transit
All data is transmitted over HTTPS/TLS. HTTP connections are automatically redirected to HTTPS.
Server-side secrets
API keys (Finnhub, Anthropic, Stripe, Resend) are stored as server-side environment variables and are never exposed to the browser.
Row-level security
Supabase row-level security (RLS) policies ensure users can only access their own trade data.
Rate limiting
Per-user rate limits are enforced on all expensive API endpoints to prevent abuse and control costs.
7. Children's Privacy
Age requirement
InsiderEdge is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us at [email protected] and we will delete it promptly.
8. Changes to This Policy
Notification
We will notify active users by email if we make material changes to this Privacy Policy. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
9. Contact
Privacy inquiries
Operating entity
InsiderEdge is operated by Waymark Labs LLC, a limited liability company organized under the laws of the State of Oregon, United States. Oregon law governs this policy and our Terms of Service.
Third-Party Services

InsiderEdge uses the following third-party services. Each has its own privacy policy governing how they handle data we share with them.

Supabase
Database and authentication. Stores your account credentials and trade watchlist.
supabase.com/privacy
Stripe
Payment processing. Handles all billing and subscription management securely.
stripe.com/privacy
Finnhub
Market data provider. Supplies live stock quotes and analyst targets.
finnhub.io/privacy
Anthropic
AI analysis engine (Pro/Institutional). Your trade data is sent to generate AI signal analysis on demand.
anthropic.com/privacy
Resend
Email delivery. Sends strong-signal alerts and account notifications.
resend.com/privacy
Cloudflare
DNS, WAF, and email routing. All traffic to insideredge.trade passes through Cloudflare, which processes IP addresses for security filtering, and mail to our published addresses is routed by Cloudflare Email Routing.
cloudflare.com/privacypolicy
Vercel
Hosting and infrastructure. Serves the application and processes serverless functions.
vercel.com/legal/privacy-policy
Upstash
Rate limiting store (Redis). Tracks API call counts to enforce per-user rate limits. No personal data stored.
upstash.com/trust/privacy.pdf
Terms of Service · Scoring Methodology · ← Back to InsiderEdge