Privacy policy

Service operator

Operator details are currently unavailable here. For existing account support, contact support@earningsnerd.io. For privacy requests, contact privacy@earningsnerd.io.

Information collected

• Accounts and access requests: Email address, any name supplied, password hash, preferences and waitlist details.
• Product use: Searches, saved summaries, watchlists, usage records, AI questions and conversation text.
• Correspondence: Contact details and messages sent through forms or email. Feedback can include links and optional screenshots, stored privately for you and authorized administrators to review.
• Billing: Subscription and payment references. Stripe handles payment details; EarningsNerd does not store complete card numbers.
• Technical information: Browser, device, IP address and request information, account identifiers, diagnostic and security records. Some records include account email.

Information comes from you, use of the service, your chosen Google or Apple login provider, and payment providers. Public SEC filings and related financial sources can include information about people named in those records. Account email and login details, relevant billing details and required contact-form details are needed to complete those requests. Optional fields can be left blank.

Purposes and legal grounds

Information is used to deliver requested features, manage accounts and payments, answer messages, send service communications, measure usage, investigate problems and protect against abuse. Where EU or UK data protection law applies, the grounds are:

• Contract: Providing requested accounts, features and subscriptions.
• Consent: Optional browser analytics; consent can be withdrawn in Cookie settings.
• Legitimate interests: Operating and improving the service, responding to enquiries, managing usage, troubleshooting, security and preventing abuse, subject to your rights.
• Legal obligations: Applicable accounting, tax, lawful disclosure and other recordkeeping duties.

AI processing

DeepSeek processes selected filing and financial information for AI analysis. Filing questions and recent conversation text are also sent to DeepSeek. Personal information in that text is not automatically removed. Avoid submitting passwords, financial account details or other sensitive information. Account-linked usage records are processed separately.

Service providers and disclosures

Information is shared as needed with providers supporting these functions:

• Hosting and content delivery: Google Cloud, Vercel and, where enabled, Logo.dev for company images.
• AI and payments: DeepSeek for the inputs described above; Stripe for billing and subscriptions.
• Login and security: Google or Apple for chosen social login; Cloudflare Turnstile for bot checks and Have I Been Pwned for partial password-hash breach checks, where enabled.
• Email: Resend and Google Workspace for recipient details, service messages and correspondence.
• Analytics and diagnostics: PostHog for optional browser analytics and separate account-linked operational usage; Sentry for errors and performance; Vercel Web Analytics for cookieless traffic measurement.

Information may also be disclosed to comply with law, investigate abuse or protect legal rights. A transfer of the service may include relevant account information, subject to applicable law.

International processing

Information is processed outside some users' countries. Backend hosting is in the United States; DeepSeek describes processing and storage in China. Resend dispatches service emails from Ireland and stores account data, including email metadata and logs, in the United States. Other providers and their subprocessors may process information in additional countries.

Privacy laws and protections differ between countries, and information may be accessible to authorities under local law. Contact the privacy address to request information about processing locations and any safeguards applicable to a transfer of your information.

Cookies and choices

Essential browser storage supports login and site functionality. Optional PostHog and Vercel browser analytics require an enabling choice. Browser analytics can be linked to your account. Session recording is disabled. Review or withdraw choices using Cookie settings in the footer.

Analytics in your browser stays off until you allow it, and you can change your choice at any time in Cookie settings. We don't change this based on your browser's Do Not Track setting.

Withdrawal applies immediately in the current tab. If your browser cannot save the choice, Cookie settings explains the limitation; check your choice after reloading or opening another tab. A request already sent cannot be recalled, and withdrawing consent does not erase information already received by a provider.

• Analytics Cookies: Usage statistics through PostHog, so we can see which pages work. When you are logged in they are tied to an internal account id.

The service also records how accounts use it, such as sign-ups, plan changes, payments, feedback and feature use, against your internal account id, to run and improve it. This does not depend on your analytics choice.

These controls do not disable operational usage records, security logs or error reporting.

Retention and deletion

• Account and saved records: Kept while your account exists, unless removed through available controls or a privacy request. Inactivity alone does not trigger deletion.
• Search history and contact submissions: Records older than 365 days are eligible for scheduled cleanup.
• Feedback screenshots: Available for 180 days, with earlier access removal when your account is deleted. An hourly cleanup process targets removal from active storage within 24 hours and tries again when a deletion fails. Feedback messages are retained separately; the screenshot limit does not delete the message.
• Waitlist: Entries remain until removed; request removal at the privacy address.
• Email opt-outs and delivery problems: When an invitation is emailed, or an address unsubscribes, bounces permanently, marks an email as spam or is blocked by our email provider, a one-way hash of that address is kept with the reason and date. An opt-out, permanent bounce, spam report or provider block stops invitation email to the address, including if it is invited again; email you request, such as verification or password-reset messages, is still sent. The hash is not the address itself but can be matched against a known address. It is kept after account deletion, with no fixed end date.
• Billing, usage and security records: Some remain after account deletion. Retention depends on the record's purpose, payment or dispute administration, security investigations and applicable legal obligations. Audit records can retain account identifiers and email.
• Provider records and backups: Separate provider retention and backup settings apply. Contact the privacy address for information about a particular record or deletion request.

Account deletion removes the account and associated records covered by that process from the active application database. It does not instantly erase every billing, audit or provider record or backup.

Your rights and complaints

Email privacy@earningsnerd.io to request access or correction, withdraw consent, or raise a privacy complaint. Depending on applicable law, you may also request deletion, a portable copy or restriction, or object to processing. Rights have conditions and exceptions.

Where EU or UK law applies, you can object to processing based on legitimate interests.

Available account updates, deletion and a JSON export are in Account Settings. The export covers records available through that feature, including your retained feedback and screenshot metadata with authenticated individual download paths. Screenshot files are downloaded separately while available; the JSON export does not contain the images or every provider's records. Requests may require proportionate identity verification. Requests and complaints are reviewed, investigated as appropriate, and answered within applicable legal deadlines, with an explanation of any permitted extension or refusal and available appeal route.

• EU/EEA and UK: Applicable rights include access, correction, deletion, portability, restriction, objection and consent withdrawal. You can complain to your local data protection authority.
• Switzerland: Where Swiss law applies, you can request information or correction and may seek deletion, restriction or object to processing. Portability applies to eligible data processed automatically based on consent or contract.
• United States: Where state privacy law applies, rights may include access, correction, deletion, portability, appeal, authorised-agent requests and opting out of sale or sharing, targeted advertising or certain profiling. Contact the privacy address to exercise an applicable right; exercising it will not result in unlawful discrimination.
• Canada and Mexico: Applicable rights can include access, correction, consent withdrawal and complaints; Mexican law may also provide cancellation and objection rights.
• Singapore: Applicable access rights include information about use and disclosure during the preceding year, alongside correction and consent withdrawal.
• Australia, New Zealand and South Africa: Applicable rights include access, correction and complaints; South African law may also provide objection and deletion rights.

You may contact the relevant regulator directly, including an EU authority, UK ICO, Swiss FDPIC, Canadian privacy commissioner, Singapore PDPC, Australian OAIC, New Zealand privacy commissioner or the South African Information Regulator.

Security, eligibility and changes

Connections use HTTPS and passwords are stored as hashes. See Security to report a concern. No internet service can guarantee absolute security.

Accounts are available only to people who are at least 18 and legally adults where they live, as required by the Terms. Contact the privacy address if a child has supplied personal information. Policy changes are posted here with an updated date; additional notice will be provided where required by law.