Privacy Policy

1. Data Controller

IQEquity is operated from Luxembourg. For data protection enquiries, contact: privacy@iqequity.ai.

2. Data We Collect

• Account data — email address (required for registration).
• Usage data — analysis queries, companies searched, report generation timestamps, plan and usage counters.
• Technical data — IP address, browser type, device information, collected automatically by our hosting provider.
• Payment data — processed and stored by Stripe. We store only your Stripe customer ID and subscription status; we never see or store card numbers.

3. Legal Basis (GDPR Art. 6)

• Contract performance (Art. 6(1)(b)) — processing necessary to provide the IQEquity service you signed up for.
• Legitimate interest (Art. 6(1)(f)) — analytics, security monitoring, and service improvement.
• Consent (Art. 6(1)(a)) — where required, e.g. optional marketing communications (not currently collected).

4. How We Use Your Data

• Provide, maintain, and improve the IQEquity platform.
• Enforce usage limits and manage subscriptions.
• Detect abuse and protect service integrity.
• Comply with legal obligations.

5. Third-Party Processors

We share data only with processors necessary to deliver the service:

• Supabase (database, authentication) — EU-hosted.
• Anthropic (AI model provider) — analysis queries and report text (for AI translation) are sent to generate and translate reports. Anthropic does not use API inputs for training.
• Cloudflare (hosting, CDN, Workers) — processes technical/request data.
• Stripe (payment processing) — handles all payment data under its own privacy policy.
• Resend (email delivery) — sends transactional and report emails; processes your email address.

6. Data Retention

• Account data — retained while your account is active; permanently deleted within 30 days of account deletion.
• Saved analyses — retained until you delete them or close your account.
• Usage & analytics data — retained for up to 12 months for security and abuse prevention, then anonymized (the link to you is removed) and kept only in aggregate.
• Billing records — retained for up to 10 years to comply with Luxembourg tax and accounting law.

7. Your Rights

Under the GDPR, you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate personal data.
• Erasure — request deletion of your data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Restriction — request we limit processing in certain circumstances.

To exercise any of these rights, signed-in users can submit a request from their account settings, or email privacy@iqequity.ai. We may need to verify your identity before acting on a request, and we will respond within 30 days.

You also have the right to lodge a complaint with your data-protection supervisory authority. In Luxembourg, this is the CNPD (cnpd.public.lu).

8. Cookies & Local Storage

IQEquity uses minimal browser storage. See our Cookie Policy for details.

9. International Transfers

Some processors (Anthropic, Cloudflare, Stripe, Resend) may process data outside the EEA. Transfers are protected by Standard Contractual Clauses or adequacy decisions.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via the platform. Continued use of IQEquity after changes constitutes acceptance.

11. Supervisory Authority

You have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD), Luxembourg's data protection authority: cnpd.public.lu.

Terms of Service

1. Service Description

IQEquity is an AI-powered equity research platform that generates structured fundamental analysis reports for publicly listed companies. The service is provided on an "as-is" basis and may change without notice during the beta period.

2. Not Financial Advice

IQEquity does not provide regulated financial advice, personal recommendations, or invitations to buy or sell securities. All reports are generated by artificial intelligence and are for informational and educational purposes only. You should always consult a qualified, regulated financial adviser before making any investment decision. We are not authorised or regulated by any financial authority (FCA, SEC, CSSF, or otherwise).

3. Eligibility

You must be at least 18 years old to create an account. By using IQEquity you represent that you meet this requirement.

4. Accounts & Security

You are responsible for maintaining the confidentiality of your account credentials. You agree to notify us immediately of any unauthorised access. We reserve the right to suspend accounts that violate these terms.

5. Acceptable Use

You agree not to:

• Use the service for any unlawful purpose or to facilitate market manipulation.
• Attempt to circumvent usage limits, rate limiting, or access controls.
• Scrape, resell, or redistribute generated reports for commercial purposes without permission.
• Interfere with the service infrastructure or attempt to gain unauthorised access.
• Misrepresent AI-generated content as human-authored professional financial advice.

7. Intellectual Property

The IQEquity platform, including its design, code, methodology, and branding, is owned by IQEquity. Generated reports may be used for your personal, non-commercial purposes. The underlying financial data is sourced from third-party providers and subject to their respective terms.

8. Disclaimer of Warranties

The service is provided "as is" and "as available" without warranties of any kind, express or implied. We do not guarantee the accuracy, completeness, or timeliness of AI-generated analysis. Financial data may be delayed, incomplete, or incorrect.

9. Limitation of Liability

To the maximum extent permitted by Luxembourg law, IQEquity and its operators shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits or investment losses, arising from your use of the service. Our total liability is limited to the amount you have paid us in the 12 months preceding the claim.

10. Indemnification

You agree to indemnify and hold harmless IQEquity and its operators from any claims, damages, or expenses arising from your use of the service or violation of these terms.

11. Modifications

We reserve the right to modify these terms at any time. Material changes will be communicated via the platform. Continued use after changes constitutes acceptance of the updated terms.

12. Governing Law

These terms are governed by the laws of the Grand Duchy of Luxembourg. Any disputes shall be submitted to the exclusive jurisdiction of the courts of Luxembourg City.

13. Contact

For questions about these terms, contact: legal@iqequity.ai.

Cookie Policy

1. What Are Cookies

Cookies and similar storage technologies (localStorage, sessionStorage) allow websites to store small amounts of data in your browser. IQEquity uses minimal browser storage — we do not use third-party tracking cookies.

2. What We Store

Essential (required for the service to function)

• Supabase auth session (localStorage) — stores your authentication token so you remain signed in between visits. Set on login, cleared on logout.
• Disclaimer acceptance (sessionStorage: equityiq-disclaimer-accepted) — records that you have accepted the legal disclaimer for the current browser session. Cleared when you close the browser.
• Locale preference (localStorage: equityiq-locale-*) — caches your selected language and translation data to avoid re-downloading on each page load.

Functional (improve your experience)

• App version cache (localStorage) — stores the current app version to manage locale cache invalidation.

Analytics

IQEquity does not currently use analytics cookies or third-party tracking scripts. If we introduce analytics in the future, this policy will be updated and consent will be requested where required.

3. Third-Party Cookies

Our third-party service providers may set their own cookies:

• Cloudflare — may set a __cf_bm cookie for bot protection. This is a strictly necessary security cookie.
• Stripe — may set cookies during the checkout process. These are governed by Stripe's privacy policy.

4. How to Control Cookies

You can control cookies through your browser settings:

• Block all cookies (note: this will prevent sign-in from working).
• Clear stored data via your browser's developer tools (Application → Storage).
• Use private/incognito browsing for a session that leaves no persistent storage.

Disabling essential storage will prevent authentication and may degrade the service experience.

5. Changes to This Policy

We may update this cookie policy if we add new storage mechanisms or analytics. Changes will be reflected on this page with an updated date.

6. Contact

For questions about cookies and browser storage, contact: privacy@iqequity.ai.