Privacy

• Account identity: your email address and a stable account identifier, managed by Amazon Cognito. We never see your password.
• Organization data: your organization name, members and their roles, and invitations you create.
• Preferences: watchlists and alert preferences.
• API keys: stored only as a keyed hash. The key itself is shown once at creation.
• Billing: handled by Stripe. We keep a customer and subscription reference and the plan status; we never receive or store card numbers.
• Audit records: access decisions and administrative actions, each with a trace identifier, kept to protect the service and for compliance.

• tr_session: your signed-in session. HttpOnly, so scripts on the page cannot read it.
• tr_csrf: a protection token that stops other sites from acting on your behalf.
• tr_org: which of your organizations is active.
• tr_pkce: a short-lived value used only while signing in.

There are no advertising or analytics cookies and no third-party trackers on these pages.

Data is used to run the service you asked for: signing you in, applying your plan, delivering research you are entitled to, and keeping an audit trail. Email delivery honors unsubscribe at all times.

You can turn off email delivery in alert preferences, revoke API keys, and remove members. Requests about your data can be sent to the contact address once it is published.