Privacy Policy
Short version: We collect the minimum data needed to run the platform. We don't sell your data. We use it to serve you, improve the product, and process payments. That's it.
1. Who We Are
ImpliedLens ("we," "us," "our") is a stock analysis platform operated as an independent service. You can reach us at support@impliedlens.com.
2. Information We Collect
Account data — When you create an account, we collect your username, email address, and a hashed password. We never store your password in plain text.
Usage data — We log product events such as sections visited, analyses run, and conversion steps. Events can be tied to a session identifier, a pseudonymous guest identifier, and, when logged in, an account ID. We use these records to operate, secure, and improve the product.
Saved research — Analyses, theses, watchlist items, positions, scenarios, portfolio profiles, and review dates that you choose to save are stored with your account. Individual saved records can be removed from their workspace controls where that control is available.
Payment data — Payments are processed by Stripe. We store your Stripe customer ID and subscription ID, but we never see or store your card number or billing details — those go directly to Stripe.
Request and security data — The application and its hosting provider process request metadata such as IP address, user agent, route, and timestamp to deliver requests, enforce rate limits, diagnose failures, and prevent abuse.
3. Cookies and Sessions
We use two first-party cookies: il.sid maintains a signed-in session for up to seven days, and il_gid is a pseudonymous guest identifier used to enforce the no-account analysis allowance for up to 90 days. Both are HttpOnly, SameSite=Lax, and marked Secure in production. We do not use advertising cookies or third-party analytics scripts.
4. How We Use Your Data
- To authenticate you and maintain your session.
- To enforce plan limits (free vs. Pro) and process subscriptions.
- To save and retrieve your cloud-synced analyses.
- To understand how the product is used so we can improve it.
- To send transactional account email, including verification, password reset, and review reminders you request or schedule. Stripe may separately send subscription communications as the billing processor.
- To detect and prevent abuse, fraud, and security threats.
5. Data Sharing
We do not sell, rent, or trade your personal data. We share data only with the following service providers, and only to the extent needed to operate the platform:
- Turso / libSQL — Hosts the production libSQL database used for accounts, sessions, saved research and workspace records, usage controls, subscription identifiers, and application events.
- Stripe — Provides hosted checkout, promotion-code support, subscription billing, billing-portal access, webhook events, and entitlement reconciliation.
- Render — Hosts the production application runtime and its public HTTP service.
- Resend — Delivers transactional account email, including verification, password-reset, account, and scheduled review messages.
- Anthropic (Claude) — Optionally rewrites already-computed technical signals into a short plain-language technical read.
- Research providers — Yahoo Finance, Finnhub, SEC EDGAR, FINRA OTC Transparency, Stooq receive the ticker or market-data request needed to return research inputs; ImpliedLens does not send your account credentials with those requests.
We may disclose data if required by law or to protect against fraud and abuse.
6. Data Retention
Account and saved-research data are retained while the account is active or as needed to operate the service, meet legal obligations, resolve disputes, and prevent abuse. The current product does not offer a one-click account-deletion control. Email support@impliedlens.com to request deletion; we will verify and handle the request subject to applicable law and legitimate retention requirements.
7. Your Rights
You can update your username and password in Account settings and remove supported saved records in the workspace. To request account access, correction, deletion, or an export, email support@impliedlens.com. Rights and exceptions vary by jurisdiction.
8. Security
Passwords are hashed with bcrypt. Production traffic uses HTTPS. We use HTTP-only cookies, CSRF checks on authenticated state-changing requests, signed Stripe webhooks, rate limits, and a Content Security Policy. No system is perfectly secure.
9. Children
ImpliedLens accounts and subscriptions are intended for people who are at least 18 years old or the age of majority in their jurisdiction. If you believe a minor has provided account data, contact us.
10. Changes to This Policy
We will post updates to this page with a revised "last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.
11. Contact
Questions? Email support@impliedlens.com.