AnalystBook is currently in pre-launch development. The full GDPR-compliant Privacy Policy will be published before the platform opens for paid registration. This page is a placeholder summarising the data practices that the final policy will document in detail.
What we collect
Account information you provide when you sign in (name and email via Google OAuth or email-based session). Research data you create inside AnalystBook (notes, saved filings, todos, watchlists). Operational metadata required to run and improve the service: error logs, one authenticated active-day aggregate, and controlled workflow start/completion/failure, latency and evidence-count totals. These operational aggregates do not store prompts, answers, notes, tickers, routes, URLs, query strings or portfolio contents.
What we do not collect
We do not buy, sell, or trade your personal data. We do not run ad networks or behavioural-tracking pixels. We do not share your research notes with anyone — not other customers, not third-party data brokers, not LLM providers for training.
Where data is stored
All customer data is stored in Google Cloud (Cloud SQL Postgres) in the EU region. Backups are encrypted at rest. Connections are encrypted in transit (TLS).
How long we keep it
Account and research data are retained for as long as your account is active. Privacy-preserving daily operational aggregates are retained for up to 400 days and are deleted with the account. Error logs are normally retained for 30 days. If you delete your account, all your private data is removed within 30 days. Public-data caches (SEC filings) are retained as part of the shared service.
Your rights (GDPR)
You have the right to access, correct, export, and delete your personal data. You can email contact@analystbook.com with a Subject Access Request and we will respond within 30 days. You can also delete your account at any time from the settings page (functionality coming with launch).
Cookies
AnalystBook uses an essential session cookie for authentication (NextAuth). Consent-gated product analytics run only after you accept analytics cookies; with that consent we also keep a first-party cookie noting where your first visit came from (the referring site, any campaign tag, and the page you landed on), which is saved to your account if you sign up within 30 days. The content-free operational daily aggregate described above uses the authenticated session but does not set an additional tracking cookie. We do not run advertising cookies.
Sub-processors
We use the following third-party services to operate AnalystBook: Google Cloud (hosting), Stripe (payments), and the email provider used for transactional notifications. The final policy will list each sub-processor with its role and data-processing scope.
Contact
Privacy questions, complaints, or data requests should go to contact@analystbook.com. The data controller is Arda Solmaz, based in Ireland.
Questions? Email contact@analystbook.com.