Issue · Privacy · v1

Privacy Policy

Last updated: October 4, 2026

1. Who we are

InsiderScope is operated by Yildiz Consulting ("InsiderScope", "we", "us"). The service is available at insiderscope.us and through the InsiderScope mobile apps for iOS and Android.

InsiderScope is provided for personal, individual use only. Accounts and subscriptions are personal to you and may not be shared; we do not offer corporate, team, enterprise, or other commercial/multi-user plans. Permitted use is governed by our Terms of Service.

2. What we collect

We keep the data set deliberately small. Specifically:

• Account identity — your email address (and the name/avatar you provide via Apple Sign In or Google Sign In). Stored and managed by Clerk on our behalf.
• Subscription state — your plan (Free, Pro, Pro+ or VIP), the platform you subscribed on (Apple, Google, Stripe), and the next renewal date. Sourced from RevenueCat and Stripe webhooks.
• Push notification tokens — an opaque device token (Expo push token) tied to your account so we can send consensus alerts. You can revoke at any time in your device settings.
• Service logs — minimal logs of API requests (timestamp, route, status), the last time your account was active and which platforms (web, iOS, Android) you have used. Used for operating the service. Not sold, not shared with advertising networks.
• Product usage data — when you are signed in to the web app, we record which screens you open, the screen you came from, the filters you pick (for example the time window or the signal category), when you tap an upgrade button or start a checkout, when you run a Deep analysis, when a list comes up empty, and when an error message is shown to you. Each event is stored with your account, the platform and the time. We do not record what you type: a search is stored only as "a search ran" and how many results it found, plus the query itself only when it is a ticker symbol such as AAPL. We use it to see which features are useful and where people get stuck, so we can improve the product. It is kept in our own database, is not sent to any analytics company, is never sold and is never used for advertising. It is on by default; you can switch it off at any time under Account → Usage data, and from that moment nothing more is recorded. We do not use session recording or heatmaps.

We do not collect your contacts, location, photos, microphone, camera, browsing history outside our domain, or financial account credentials. We never see your credit card number — payment is handled directly by Apple, Google or Stripe.

3. How we use it

• To authenticate you and keep your session signed in.
• To resolve your subscription tier and gate Pro features.
• To send the consensus push notifications you opted in to.
• To detect abuse, debug errors, and operate the service reliably.
• To understand how the product is used and improve it, from the product usage data described above (unless you switch it off).
• Marketing email (optional, opt-in only). If — and only if — you turn on the weekly newsletter in your Account settings, we use your email to send a periodic email with notable signals and product updates. It is off by default. Every issue includes an unsubscribe link, and you can opt out any time from Account settings. We never sell or share your email with advertisers.

4. Third-party processors

We rely on the following sub-processors. Each is a well-known company with its own privacy policy:

• Clerk (clerk.com) — authentication, user profile storage. Privacy
• RevenueCat (revenuecat.com) — subscription receipt validation across Apple, Google, Stripe. Privacy
• Stripe (stripe.com) — web subscription payments. Privacy
• Apple App Store / Google Play Billing — mobile subscription payments. Governed by their respective policies.
• Firebase Cloud Messaging (Google) — Android push delivery. Privacy
• Apple Push Notification Service — iOS push delivery.
• Cloudflare — content delivery and DDoS protection.
• Amazon Web Services — hosting of our servers and database.
• Resend (resend.com) — delivery of account and lifecycle email. Privacy
• Beehiiv (beehiiv.com) — delivery of the weekly newsletter, only if you opt in. Privacy
• Slack — internal operational notifications to our team (for example, that a new account signed up).

Market-data inputs (OpenInsider for SEC Form 4 filings, Dataroma for 13F filings, Stocktwits trending) are public data sources. We do not send your personal data to them.

5. Cookies & analytics

We keep cookies to a minimum and use no advertising or cross-site tracking cookies. Specifically:

• Essential — a small cookie remembers your language choice, and our authentication provider (Clerk) sets a session cookie when you sign in. These are required for the site to function and are always on.
• Analytics (optional, consent-based) — we use Google Analytics 4 with IP anonymization to understand aggregate, anonymous usage. Analytics cookies stay off until you accept them in the cookie banner; if you decline, none are set. You can change your choice anytime by clearing this site's storage in your browser.
• Cloudflare — provides content delivery and privacy-friendly, cookieless traffic measurement for security and performance.

6. Data retention

We retain account data for as long as your account is active. Push tokens that fail twice are flagged inactive. Product usage data is deleted automatically after 13 months. If you delete your account, we remove your user record, push tokens and product usage data within 30 days. Anonymized signal data may be retained indefinitely for product analytics.

7. Your rights

You can review and export your data, correct inaccuracies, or request deletion at any time by emailing the address below. EU/UK and California residents have specific rights under GDPR / CCPA which we honor regardless of where you live.

8. Children

InsiderScope is intended for adults (18+). We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we'll remove the account.

9. International transfers

Our servers and sub-processors are located in the United States. By using InsiderScope, you consent to your data being transferred to and processed in the United States.

10. Security

Traffic is encrypted in transit (TLS). Subscription receipts are validated server-side. We follow least-privilege access for our infrastructure. No system is perfect — if you believe you've found a vulnerability, please email us so we can fix it.

11. Changes to this policy

We may revise this policy. The "last updated" date at the top will change. Material changes will be highlighted in-app or via email.

12. Contact

Questions, data requests, deletion requests: [email protected].

InsiderScope is an information aggregator, not a registered investment advisor. We do not provide financial advice. All trading decisions are yours.