CALIFORNIA BUSINESS ? U.S. CLIENTS

Privacy Notice

This public project website does not currently create accounts, accept messages, enroll trials or collect payments. The account and inquiry practices below describe the secure service when it is available.

Privacy at a glance

See the sections below for what is collected, who receives it, retention and requests. The Terms of Use govern account use. Payment authorization is separate from a privacy acknowledgment; no policy acknowledgment gives us unrestricted permission to use your information.

What we collect and why

When you submit an inquiry, we store your name, email, optional phone number, topic and message to respond and manage requests. When an administrator creates your client account, we store your contact and mailing/billing address, access status, subscription dates, payment status, invoice/provider references and optionally a card's last four digits. We do not collect full card numbers, CVVs, bank account details or payment passwords. Payment processing and the records we keep are explained below.

We store account authentication records and the reports, inputs, watchlists and recovery copies you create to provide the service. We record limited security events and use short-lived keyed identifiers for rate limiting. Do not submit sensitive financial account credentials in notes or messages.

Stripe payment processing and billing records

Current status: Stripe is connected in sandbox mode for testing. This version does not accept live payments. The payment workflow described here applies to the secure account portal; the static public website does not collect payment details.

Information sent to Stripe

We use Stripe as our third-party payment processor for hosted checkout, subscription billing, invoices and payment-method management. When you request checkout, our server sends Stripe your account email and an internal account identifier, together with your selected price and subscription settings. Opening checkout may create a Stripe customer record even if you do not complete a purchase. We do not send your account password, birth date, research reports, notes or personal AI-provider API keys to Stripe through this billing integration.

Stripe collects payment credentials and billing information directly through its hosted pages, together with transaction, device and fraud-prevention data. Depending on your selected method, information may include your name, email, billing address, card or other payment-account details, IP address and browser information. Stripe uses and shares data with financial partners and service providers for processing, security, fraud prevention and legal obligations. Its practices are described in the Stripe Privacy Policy and Privacy Center. Optional Stripe services, such as Link or a wallet, may have additional terms presented by that provider.

Information retained by Wall Street Watchers

Payment credentials entered on Stripe-hosted pages go directly to Stripe. Our application does not receive or store full card numbers, card security codes, bank-account credentials or payment passwords. It retains encrypted Stripe customer, checkout, subscription and invoice identifiers, the selected plan and amount, subscription and payment status, trial and billing-period dates, cancellation information, processed-event identifiers and payment-authorization records. Our Stripe Dashboard may separately make transaction details and limited payment-method information available to authorized operators. Records entered manually by an administrator can include a provider reference and a card's last four digits.

We use these records to provide access, reconcile billing, handle support and cancellations, prevent misuse and maintain business records. Access is restricted through account permissions; authorized operators and hosting providers may process information as needed to operate the service. Stripe processes payments for our service; Wall Street Watchers remains responsible for its own product, billing instructions and privacy practices.

Retention, security and privacy requests

Stripe determines retention under its own obligations, including legal, fraud-prevention, tax and accounting requirements. Canceling a subscription or deleting a Wall Street Watchers account does not automatically delete Stripe records. Stripe may process information outside your state or country. No payment or storage system can guarantee complete security. Review Stripe's policy for its safeguards, retention and request procedures.

We retain local billing and authorization records, including versioned signup agreements and policy snapshots, while needed to administer the account, resolve disputes and meet applicable obligations. We review them on account closure; applicable exceptions may require retention. Separately protected backups follow the operator's retention schedule. Contact Wall Street Watchers at Raymond.Angel.Developer@gmail.com about records we control, and use Stripe's Privacy Center for information Stripe controls. We may need to verify your identity. A privacy request does not itself cancel a subscription: use the account's cancellation control to stop future renewal, then request account closure or deletion. These procedures do not limit rights provided by applicable law.

Payment authorization and your choices

Reading this notice, registering an account or acknowledging the privacy notice does not authorize a charge. Before proceeding to checkout, you must separately accept the payment authorization and subscription terms. You authorize Wall Street Watchers to instruct Stripe to process the subscription you confirm at checkout, including recurring charges until cancellation. Checkout shows the selected amount, billing frequency, trial eligibility and first charge date before confirmation. We retain the accepted wording, its version, the selected plan, the checkout reference and an acceptance timestamp.

The offers are US$79.99 every month or US$200.00 every three months. Eligible new subscribers receive a seven-day free trial with a payment method collected upfront. Cancel before the trial ends to prevent conversion to paid billing. Cancel online in your account without completing the optional survey; cancellation stops future renewal and preserves remaining trial or paid access through its scheduled end. Sandbox transactions use test payment details only. If you decline the payment authorization, do not complete checkout; you can still browse public information. This acknowledgment is not consent to optional analytics or marketing, and it does not waive statutory privacy, payment-dispute, refund or cancellation rights.

Optional website analytics

Analytics are off until you choose Allow analytics. We then record public page visits and predefined button/link actions with a random browser-session identifier. We do not collect form contents, full URLs, query strings, precise location, device fingerprints or raw IP addresses in analytics, and we do not join anonymous events to client profiles. Counts describe consenting sessions, not verified individual people.

Use Privacy choices or Turn off analytics in the footer at any time. Withdrawal removes events associated with the current browser session. Clearing cookies may prevent us from recognizing earlier sessions. We honor Global Privacy Control and Do Not Track by disabling optional analytics. Essential session cookies protect sign-in, remember privacy choices and prevent forged requests.

Reading preferences on this device

The reading options can remember larger text, extra spacing and high contrast in your browser local storage. These display settings are not sent to the server and contain no account, form or report information. Uncheck the options to return to the defaults, or clear this site's browser storage to remove the saved choices.

Sharing and providers

This application does not sell personal information or share it for cross-context behavioral advertising. Our own pages contain no third-party advertising trackers. Stripe-hosted pages and optional payment services are governed by their own tracking disclosures, as explained in the Stripe section above. AI research uses your personal OpenAI, Grok or Google Gemini API key. Browser keys pass through the server for each request and are not stored in cookies, browser storage, reports or databases. Desktop keys remain in session memory. Company identity, official domain, requested dates and research instructions go to the selected provider; saved reports and personal notes remain private. Provider API billing and retention policies apply. Hosting providers may process technical traffic logs separately; their actual configuration and retention must be documented before launch. Disclosure may also be required by law.

Pasted articles and offline excerpts

Desktop article summarization runs on your computer. In the browser workspace, pasted article text is sent to the Wall Street Watchers server for processing in memory. Neither path sends that text to an AI provider. Articles and excerpts are not automatically written to the report database or recovery files. Clear pasted articles removes the current text and result. Export saves the selected excerpts to a file you choose. Browser/server memory and files you export may remain accessible on your device; avoid pasting confidential information. Deployment operators must disable request-body logging and document any hosting logs and backup practices.

Optional cancellation feedback

Clients may submit a cancellation reason and comments, or skip the survey and cancel immediately. Submitted feedback is linked to the client account, encrypted in server storage and available only to authorized administrators to improve the service. It is retained for up to one year and removed from active storage when the client account is erased. Feedback failures do not prevent cancellation. This is separate from optional website analytics.

Retention and recovery

Optional analytics expire after 90 days; inquiries expire after one year. The server maintenance process enforces these limits. Client and billing records are retained while needed for service and applicable obligations, with review on closure. Reports deleted from normal history retain recovery copies. A verified privacy erasure handled by the administrator removes account data, reports and recovery copies from active storage. Separately protected backups follow the operator's documented backup retention schedule and may not disappear immediately.

Your choices and requests

You may ask to access, correct or delete your information, subject to identity verification and applicable legal exceptions. Email Raymond.Angel.Developer@gmail.com with the subject Privacy request. When the secure contact form is available, you may also select Privacy request there. Do not send full card numbers, card security codes, passwords or API keys. You may decline optional analytics and still use the site. We do not use analytics to make eligibility, pricing or investment decisions. The business is based in California and serves eligible users aged 13 through 108 in the United States. Additional statutory rights depend on the laws that apply to the business and your request.

Birth dates and age eligibility

New client registration requires a birth date to check that applicants are between 13 and 108 years old using the server’s current UTC date. Ineligible dates are rejected before an enrollment record is saved. Eligible birth dates are encrypted in the temporary registration record and client profile and are visible to authorized administrators. A birth date alone is not used to verify identity for recovery and does not prove legal capacity to enter a paid contract. The service is not intended for children under 13. Contact our privacy email if you believe a child under 13 has supplied personal information so we can investigate and take appropriate action. Social Security numbers are not collected, and passwords are stored as secure hashes rather than readable passwords.

Security monitoring

The secure account server records denied access, authentication failures, invalid protected requests and rate-limit blocks to detect and investigate suspicious activity. These encrypted records contain the source IP address observed by the server, timestamps, request method, known route template, response status and attempt count. They exclude request bodies, query strings, passwords, authenticator codes, API keys and report contents. Security monitoring is separate from optional marketing analytics and is visible only to authenticated administrators.

Security events are grouped by source and minute, retained for up to 30 days and limited to 2,000 groups; older groups may be removed sooner if the limit is reached. An IP address may represent a shared network, VPN or proxy and does not establish a person’s identity. Alerts indicate activity to review, not proof of a breach.

Protection and updates

Account and report contents are encrypted in server storage. Administrator access requires a password. Administrator and client authenticator enrollment and code checks are temporarily paused; existing authenticator secrets are preserved for later restoration. When administrator MFA is re-enabled, sign-in also requires an authenticator code. No system is immune to compromise; server owners and authorized administrators retain responsibilities for access, backups and incident response. Material changes will be reflected here with an updated date and any additional notice or consent required by applicable law. Changes to this notice do not by themselves authorize new charges or materially different uses of information. This notice describes the implemented software; deployment providers and retention practices must be finalized before public launch.