Privacy Policy

1. Information we collect

Account information. When you sign in we store your email address, an internal user ID, and (for Google OAuth) your Google subject identifier and basic profile information returned by Google. We never receive or store your Google password.

Billing information. Paid subscriptions are processed by Stripe. We store your Stripe customer ID and subscription status; we never receive or store your full card number — Stripe handles that directly.

Usage data. We log pageviews and product interactions (clicks on filings, filter changes, share buttons, etc.) via Google Analytics 4. These events are anonymous and never contain your email, name, or phone number.

Email subscribers. If you subscribe to our weekly digest we store your email address and a confirmation timestamp. One-click unsubscribe is supported on every email.

Server logs and error monitoring. We use Sentry for error monitoring. Stack traces and request metadata may be captured when something goes wrong; we do not deliberately send personal information to Sentry.

2. Cookies, localStorage, and UTM attribution

We use a small number of browser-storage mechanisms:

• Session cookies for authentication. These are HTTP-only and expire when your session ends.
• Google Analytics 4 cookies (`_ga` and related) assign you an anonymous client ID so we can measure traffic and engagement.
• localStorage attribution records the marketing channel that referred you (the `utm_*` parameters and the referring host) so our reports show which channels send valuable traffic. The stored data is attribution metadata only — never email, name, or any other personal identifier — and is removed after 30 days of inactivity.
• Stripe may set cookies on its own checkout pages. See Stripe's privacy policy.

3. Third-party services

We rely on the following service providers. Each has its own privacy policy:

• Google Analytics 4 — anonymous traffic and engagement measurement.
• Google Identity Services (OAuth) — sign-in.
• Stripe — billing and subscription management.
• Resend — transactional email and weekly digest delivery.
• Sentry — error monitoring.
• Vercel and Railway — hosting.
• SEC EDGAR — public source for all filings data shown on the Site.

4. How we use information

• To operate the Site, including authenticating you and showing you content tied to your account.
• To process subscription payments through Stripe.
• To send transactional emails (sign-in links, billing receipts) and the weekly digest you opted into.
• To measure usage in aggregate so we know which features and pages are useful.
• To detect and respond to errors, abuse, and security issues.

We do not sell your personal information. We do not run paid advertising on the Site and do not use ad-network tracking.

5. Data retention

• Account data is kept while your account is active.
• Email-subscriber records are kept until you unsubscribe; we retain a hashed marker after that to honour your choice and avoid re-subscribing you in error.
• Analytics events follow Google Analytics's default retention (currently 14 months for event-level data).
• Server logs are retained for up to 30 days.

6. Your choices and rights

• Access, correction, deletion. Email support@form4ai.ai from the email address on your account and we'll respond within a reasonable timeframe (we aim for 14 days).
• Email opt-out. Every email has a one-click unsubscribe link. You can also email us to opt out.
• Analytics opt-out. Use a browser-level do-not-track signal, an ad-blocker, or Google's Analytics Opt-out Browser Add-on.
• Cookie controls. You can clear cookies and localStorage from your browser at any time. Doing so will sign you out and reset attribution.

7. Children

The Site is not directed at children under 16. If you believe a child has provided us with personal information, contact us and we'll delete it.

8. International users

Form 4 AI is operated from the United States. By using the Site you understand that your information will be processed in the United States, where data-protection laws may differ from your home jurisdiction.

9. Changes

We may update this policy. Material changes will be announced on the Site or by email; the "Last updated" date at the top reflects the most recent revision.

10. Contact

Questions or requests: support@form4ai.ai.