Privacy Policy

Introduction

EarningsNerd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this privacy policy carefully.

Information We Collect

We collect information that you provide directly to us, including:

• Account Information: When you register for an account, we collect your name, email address, and password.
• Waitlist Information: When you join our waitlist, we collect your email address and optionally your full name.
• Payment Information: When you subscribe to our services, payment information is processed securely through our payment processor (Stripe). We do not store complete credit card numbers.
• Usage Data: We automatically collect information about your interactions with our services, including the companies you search for, filings you view, and features you use.
• Device and Browser Information: We collect information about the device and browser you use to access our services, including IP address, browser type, operating system, and referring URLs.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Create and manage your account
• Process your transactions and send related information
• Send you technical notices, updates, security alerts, and administrative messages
• Respond to your comments, questions, and customer service requests
• Communicate with you about products, services, and events
• Monitor and analyze trends, usage, and activities in connection with our services
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Personalize and improve your experience

Analytics and Tracking

We use analytics services to help us understand how our services are used:

• PostHog: We use PostHog for product analytics and user behavior tracking. This helps us understand how users interact with our platform and improve the user experience.
• Sentry: We use Sentry for error tracking and performance monitoring to identify and fix technical issues quickly.

Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect and store information. Cookies are small data files stored on your device that help us improve our services and your experience.

Cookie Categories:

• Essential Cookies: Required for the website to function (authentication, security, session management). These cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our site (PostHog). You can opt-in or opt-out via our cookie consent banner.
• Session Recording: Records your interactions to help identify bugs (PostHog). This is opt-in only and masks sensitive information like passwords.

You can manage your cookie preferences at any time through our cookie consent banner (shown on first visit) or through your browser settings. Note that disabling cookies may limit certain features. We respect the "Do Not Track" browser setting and will not track users who have enabled it.

Information Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: We share information with third-party service providers who perform services on our behalf, such as payment processing (Stripe), email delivery (Resend), analytics (PostHog), and error tracking (Sentry).
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share your information with third parties when you give us consent to do so.

Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, we process your personal data under the following legal bases:

• Contract: Processing is necessary to perform our contract with you (account creation, service delivery, payment processing).
• Consent: You have given explicit consent for analytics tracking, marketing communications, and session recording (opt-in).
• Legitimate Interest: Processing is necessary for fraud prevention, security, and improving our services.
• Legal Obligation: Processing is required to comply with legal obligations (tax records, payment history).

Data Retention Periods

We retain different types of information for specific periods:

• Active Accounts: Your account data (email, name, password) is retained until you delete your account or after 2 years of inactivity.
• Search History: Retained for 1 year from the search date, then automatically deleted.
• Saved Summaries & Watchlist: Retained until you manually delete them or delete your account.
• Contact Form Submissions: Retained for 1 year from submission date.
• Waitlist Signups (unconverted): Retained for 1 year from signup date.
• Payment & Billing Data: Retained for 7 years from transaction date (required by tax law).
• Analytics Data (PostHog): Retained for 90 days, then automatically deleted.
• Error Logs (Sentry): Retained for 90 days, then automatically deleted.
• Inactive Accounts: If you don't log in for 24 months, we'll send warning emails at 18, 22, and 23 months. Your account will be automatically deleted at 24 months unless you log in.

When data is deleted, it is permanently removed from our active systems. Data may persist in encrypted backups for up to 12 months for disaster recovery purposes but is inaccessible for operational use.

Your Rights and Choices

You have the following rights regarding your personal information:

• Right to Access: You can access and view your account information at any time through your account dashboard.
• Right to Rectification: You can update your account information (email, name, password) through your account settings.
• Right to Erasure (GDPR Article 17): You can delete your account and all associated data instantly through your account settings page. This will permanently delete your profile, search history, saved summaries, watchlist, and usage data. Payment records will be retained for 7 years for tax compliance.
• Right to Data Portability (GDPR Article 20): You can download a complete copy of your data in JSON format from your account settings page. This includes your profile, search history, saved summaries, watchlist, and usage statistics.
• Right to Object: You can object to processing of your data for direct marketing purposes by unsubscribing from emails or by contacting us.
• Right to Restrict Processing: You can request that we limit how we use your data by contacting us at privacy@earningsnerd.com.
• Right to Withdraw Consent: You can withdraw consent for analytics and session recording at any time through our cookie consent banner or settings.
• Opt-Out of Marketing: You can opt out of receiving promotional emails by following the unsubscribe link in those emails.

For EEA, UK, and Swiss Residents: If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities can be found at EDPB Members.

Third-Party Services

Our services may contain links to third-party websites or services that are not owned or controlled by EarningsNerd. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you visit.

Children's Privacy

Our services are not directed to individuals under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you become aware that a child has provided us with personal information without parental consent, please contact us at privacy@earningsnerd.com, and we will take immediate steps to delete such information.

International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have data protection laws that differ from your country's laws. When we transfer data from the EEA, UK, or Switzerland to other countries, we use Standard Contractual Clauses (SCCs) approved by the European Commission or other appropriate safeguards to protect your data.

Our third-party service providers (Stripe, Resend, PostHog, Sentry) are located in the United States and have Data Processing Agreements in place that include appropriate safeguards for international data transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your data protection rights, please contact us at:

• Privacy Inquiries: privacy@earningsnerd.com
• General Support: hello@earningsnerd.com
• Data Deletion or Export: Use your account settings for instant self-service

We will respond to your privacy requests within 30 days (or as required by applicable law).