Privacy Policy

1. Introduction

The Insider Index ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and password.
• Contact Information: If you contact us directly, we collect your name, email address, and the contents of your message.

2.2 Information Collected Automatically

• Device Information: We collect information about the device you use to access our Service, including device type, operating system, and unique device identifiers.
• Usage Data: We collect information about how you interact with our Service, including pages viewed, features used, and actions taken.
• Log Data: Our servers automatically record information when you access the Service, including your IP address, browser type, referring/exit pages, and timestamps.
• Crash Diagnostics: Our iOS app reports crashes and errors to Sentry, our diagnostics provider. These reports include the device model, operating system version, app version, and a stack trace describing what the app was doing when the problem occurred.

2.3 Information From Third Parties

We may receive information about you from third parties, including authentication providers if you choose to sign in using a third-party service.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Communicate with you about products, services, offers, and events
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse
• Personalize and improve your experience
• Comply with legal obligations

4. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data based on the following legal grounds:

• Consent: Where you have given us explicit consent to process your data for specific purposes.
• Contract: Where processing is necessary for the performance of a contract with you.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights.
• Legal Obligation: Where processing is necessary to comply with applicable laws.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until deleted). We use cookies for authentication and preferences. We do not use cookies for advertising, and we do not run advertising on the Service.

6. Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: We share information with third-party vendors who process data on our behalf. As of the date below these are: Vercel (application hosting), Supabase (database and authentication), Sentry (crash and error diagnostics, iOS app only), Resend (transactional email), and Upstash (rate limiting, which stores a hashed form of your IP address rather than the address itself). If you sign in with Apple or Google, that provider also processes your sign-in.
• Legal Requirements: We may disclose information if required by law or if we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset.

We do not sell your personal information to third parties.

7. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

10. Your Rights

Depending on your location, you may have the following rights:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict processing of your information
• Request portability of your information
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@insiderindex.com.

11. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request deletion.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.