Privacy Policy

Peer Disclosures ("we," "us," or "our") provides a web application for comparing U.S. SEC filings. This Privacy Policy explains what information we collect, how we use it, and what choices you have.

1. Information we collect

Account and billing information

If you create an account or subscribe to a paid plan, we collect information needed to authenticate you and manage billing, such as:

• Email address
• Organization and subscription tier
• Stripe customer and subscription identifiers
• Saved peer group names and ticker lists you choose to store

Authentication is handled through Supabase. Payment processing is handled by Stripe. We do not store full payment card numbers on our servers.

SEC filing content

Peer Disclosures retrieves public SEC filings from EDGAR. To improve performance, we cache filing HTML and parsed sections on our servers after the first request so they do not need to be re-downloaded from EDGAR every time. This cached content is derived from publicly available SEC data.

Filing content is not stored in your account database. We do not use filing text for advertising, resale, or AI model training.

Browser and technical data

During your session, the application may store lightweight comparison metadata (such as ticker lists and section identifiers) in your browser's session storage to speed up navigation. Standard web server and application logs may include IP address, browser type, and request timestamps for security and reliability.

Analytics and cookies

When analytics is enabled in production, we use Google Analytics 4 (GA4) via Google's gtag.js library to understand how the product is used (for example, whether compare views load and where upgrade calls-to-action are clicked). GA4 may set or read first-party cookies and similar identifiers in your browser, and may collect approximate location, device/browser characteristics, page URLs, and event parameters we send (such as peer comparison slug, ticker count, subscription tier label, and CTA location). We configure IP anonymization where supported and do not intentionally include email addresses, names, or other personal identifiers in analytics event parameters.

When Google Ads measurement is enabled, we also load the same gtag.js tag with our Google Ads ID so Google can measure ad performance and (when conversion actions are configured) attribute conversions. This may set or read similar first-party cookies and advertising measurement identifiers as described in Google's privacy policy.

We also use Vercel Web Analytics for aggregated traffic metrics on our hosting platform. Vercel Analytics is designed to be privacy-friendly and does not rely on cross-site advertising cookies for its core page-view metrics.

Analytics scripts load only when a measurement ID and/or Google Ads tag ID is configured for the deployed environment. Free compare remains available without creating an account. We do not currently show a separate cookie consent banner; use of analytics and Ads measurement cookies is disclosed here. A consent-management / Consent Mode integration (including for EEA visitors) may be added later.

2. How we use information

We use collected information to:

• Provide and operate the comparison workspace
• Authenticate users and enforce subscription limits
• Process payments and manage subscriptions
• Understand product usage and improve conversion paths (via analytics)
• Improve performance, reliability, and security
• Respond to support requests and legal obligations

3. What we do not do

• We do not sell your personal information.
• We do not use filing content to train machine learning models.
• We do not store parsed filing HTML in your account database record.
• We do not intentionally send account emails or payment details to Google Analytics.

4. Sharing with service providers

We use trusted third-party providers to operate the service, including hosting (Vercel), authentication (Supabase), payments (Stripe), and product analytics / ad measurement (Google Analytics and Google Ads when enabled). These providers process data on our behalf according to their own privacy policies and our agreements with them. Google's processing of analytics and ads measurement data is described in the Google Privacy Policy.

5. Data retention

Account and billing records are retained while your account is active and as needed for legal, tax, and audit purposes. Server-side filing caches may be retained to improve performance for all users accessing the same public filings. Session storage data is cleared when you close your browser tab. Analytics retention follows the retention settings we configure in Google Analytics and Vercel's platform defaults.

6. Security

We use industry-standard measures to protect account and billing data, including encrypted connections (HTTPS) and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your choices

• You may use the free tier without creating an account.
• You may sign out at any time from the application header.
• Professional subscribers may manage or cancel billing through the Stripe Customer Portal.
• To limit analytics cookies, use your browser controls (block third-party or site cookies, clear site data, or use a tracking-protection / private browsing mode). You can also use Google's Analytics opt-out browser add-on where available.
• To request access, correction, or deletion of account data, contact us using the information below.

8. Children

Peer Disclosures is intended for business and professional use. We do not knowingly collect information from children under 16.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date at the top of this page when changes are posted.

10. Contact

Questions about this Privacy Policy may be directed to privacy@peerdisclosures.com.