Privacy Policy

1. Scope

This Privacy Policy describes how Pelarys LLC ("we," "us," or the "Company") handles information in connection with the Pelarys investment research and analytics platform (the "Platform"). It applies to visitors and registered customers in the United States, where the Platform currently launches. It does not apply to third-party sites we link to (Section 15).

2. Account and Authentication Information

When you create an account, our authentication service provider (Supabase Auth) collects your email address and password, and, if you sign in with Google or Microsoft, your identity information from that provider. Your email address and password are managed by Supabase Auth and are not stored in our own application database.

Our own application database stores your account identifier, an optional display name, your account status, and, if you choose to provide them, a small set of optional research-interest topics used only to help order what you see first -- never to score, rank, or personalize any research output.

3. Subscription and Payment Information

If you subscribe to the Platform, our payment processor, Stripe, collects and processes your payment card details directly. We do not receive, and do not store, your full card number. Our own application database stores only a Stripe-assigned customer/subscription identifier and your subscription status (for example, trial, active, or cancelled) -- never your card number, billing address, or other card-network data.

4. Legal Acceptance Records

When you accept our Terms of Service and acknowledge this Privacy Policy at signup, we record a durable evidentiary entry: your account identifier, the document versions you accepted, and the date and time of acceptance. This record is used only to establish that acceptance occurred; it is never used for advertising, scoring, or personalization.

5. Customer Research Content

Your research notes, investment theses, and watchlists are private account content. We store this content to provide the requested research features, secure your account, and support the functionality you use it for. Database-level row-security rules and application-level ownership checks restrict this content to your own account.

We do not use the substance of your research notes or investment theses for advertising, and we do not sell this content. We do not transmit the content of your research notes or investment theses to a third-party generative AI model, and we do not transmit this content to our market-data providers -- those providers receive only ticker/company identifiers as part of independent, platform-wide data requests never associated with any specific customer.

6. Browser Storage and Cookies

We use one first-party session cookie, set by Supabase Auth, to keep you signed in. This cookie is strictly necessary for the Platform to function and is not used for advertising or cross-site tracking. Your browser's local storage is separately used, entirely on your own device, to remember minor UI state (such as your compare selection or onboarding progress); this is not transmitted to us as a distinct collection event.

As of the date of this Policy, we are not aware of any advertising cookie, behavioral-tracking pixel, or third-party analytics tag operating on the Platform.

7. Product Usage Information

We record a small set of product events (for example, that you followed a company, opened an Intelligence finding, or viewed evidence) tied to your account identifier, used only to understand whether the Platform is delivering value and to operate the subscription funnel. This information never includes free-text content, passwords, or payment card data, and is governed by a fixed, allow-listed set of event types -- there is no general-purpose activity log of everything you do.

8. Information Collected Automatically

Our infrastructure and service providers may automatically process technical information -- such as IP address, browser/device information, and request metadata -- as necessary to operate, secure, and deliver the Platform. Our own application code does not itself log this information in a dedicated table; where it is processed, it is processed by the infrastructure and service providers we rely on, as part of their own standard operation.

9. Service Providers

We share information with service providers only as necessary to operate the Platform: Supabase (database hosting and authentication), Stripe (payment processing), Vercel (frontend hosting), and Render (backend hosting). We do not share your account or research content with any other third party for their own independent use, and we do not sell your information.

10. Market and Research Data Providers

The Platform displays research information sourced from Massive, Financial Modeling Prep (FMP), and the U.S. Securities and Exchange Commission's EDGAR system. These providers supply public and licensed market/research data in response to requests keyed by company ticker, made as part of our own independent, platform-wide data ingestion -- not in response to, or containing, any of your personal information, watchlist, or research content.

11. How We Use Information

We use the information described above to provide and operate the Platform, authenticate and secure your account, process your subscription, respond to your requests, monitor and improve reliability and security, and comply with legal obligations. We do not use your account or research content to generate personalized investment recommendations -- the Platform does not have that capability.

12. Disclosure for Legal or Security Reasons

We may access, preserve, or disclose information if we believe in good faith that doing so is necessary to comply with applicable law or legal process, protect the rights or safety of Pelarys or others, or detect or prevent fraud or security incidents.

13. Data Retention

We retain information for as long as reasonably necessary to provide and secure the Platform, comply with legal obligations, and enforce our agreements. As of the date of this Policy, we do not apply a fixed retention period to customer research content or account data.

14. Account Deletion and Privacy Requests

The Platform does not currently offer a self-service account-deletion feature. If you wish to request deletion of your account and associated data, or have another question about your personal information, contact us at jorge@pelarys.com. Requests are handled manually by an operator following our internal account-deletion process, and are not instantaneous.

15. Security

We maintain administrative, technical, and organizational safeguards designed to protect information from unauthorized access, use, or disclosure. No electronic transmission, storage system, or security measure can be guaranteed to be completely secure.

16. Children

The Platform is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18.

17. Third-Party Links

The Platform may link to third-party websites (for example, a link to a filing on SEC.gov). This Policy does not apply to those sites; review their own privacy policies.

18. Changes to This Policy

We may update this Policy from time to time. We will update the "Last Updated" date above when we do, and, for a material change, provide notice through the Platform.

19. Contact Us

Questions about this Policy, or requests regarding your personal information, may be directed to: jorge@pelarys.com.

Pelarys LLC, 8621 N Lake Dasha Dr, Plantation, FL 33324