Privacy Policy

Information We Collect

Depending on your interaction with datawiser, we process:

• Account and access information: your email address, account identifiers, authentication metadata, and API-key metadata such as creation time and last use.
• Customer and eligibility information: your country, whether you are purchasing as an individual or a business, business name where applicable, and the declaration you make about your business purchase.
• Subscription and transaction records: your tier, Stripe customer and subscription identifiers, invoices and payment status, billing periods, cancellation status, and records needed to resolve billing enquiries.
• Acceptance and verification records: your saved eligibility declaration, its timestamp, and evidence of Checkout completion, collected country and Terms acceptance.
• Usage and operational information: API request counts and quota usage, IP addresses, request timestamps, and service or error logs used for security and reliability.
• Communications and preferences: messages you send us, information needed to answer them, and mailing-list subscription and unsubscribe preferences.

We obtain this information from you, from your use of the service, from authentication and payment providers, and, where relevant, from the business on whose behalf you use an account. Billing details collected by Stripe are described below; not every field held by Stripe is copied into datawiser's database.

Some information is needed to create an account, confirm eligibility or provide a paid subscription. Without it, we may be unable to offer the relevant feature. Mailing-list sign-up is optional. Please do not send passwords, API keys, trading credentials or full payment-card details in support messages.

How We Use Your Information

We use personal information for the following purposes and legal grounds under applicable data protection law:

• Providing the service: creating and managing accounts, authenticating API access, administering subscriptions and allowances, and providing essential account and billing messages. We rely on performance of our contract where you are personally a party to it, including steps you request before subscribing.
• Business relationships and enquiries: managing contacts acting for business customers and responding to questions. We rely on our legitimate interests in administering those relationships, or on taking contractual steps at your request where applicable.
• Security, reliability and eligibility:preventing misuse and fraud, enforcing access and usage limits, checking purchase declarations, troubleshooting and handling disputes. We rely on legitimate interests in protecting users, operating a reliable service and administering our subscription rules. Those interests must be balanced against your rights.
• Legal obligations: keeping required accounting and tax records, responding to valid legal requests and handling data protection rights and complaints. We rely on compliance with the legal obligations that apply to us.
• Optional marketing: sending the mailing-list updates you choose to receive. We rely on your consent for this opt-in mailing list.

We use automated checks for subscription status, purchase eligibility and API allowances. A failed check can prevent Checkout or paid access. Contact us if you believe a check has used incorrect information or you wish us to review the result.

Mailing List

You may choose to receive product updates and announcements. You can unsubscribe at any time using the link in our marketing emails or by contacting us. A paid subscription does not itself require joining the mailing list.

Unsubscribing stops marketing messages, but we may still send necessary account, security, billing or service messages.

Payments & Subscriptions

Stripe processes subscription payments and provides Checkout and the customer billing portal. Payment details are entered directly into Stripe's payment interface. We do not store full payment-card numbers or card security codes.

Stripe collects billing information such as name, address, country and, if provided, a tax identifier. We receive or consult the subscription, transaction and verification information needed to administer your purchase, including comparing the billing country collected by Stripe with your saved declaration and checking Terms acceptance. We retain relevant billing records, rather than treating your return to a success page as proof of payment.

Stripe also processes information for purposes it determines, including fraud prevention and legal compliance. Its own Privacy Policy explains that processing and how to contact Stripe about your information.

Data Storage & Processors

We use service providers to operate datawiser. These include Supabase for authentication and database storage, Vercel for website and API hosting, and Stripe for payments, subscriptions and billing. Information needed for requested account and mailing-list messages is also processed through our email delivery arrangements. Where we use document-processing providers to extract or validate public filings, relevant source material is processed for that purpose too.

Providers processing information on our behalf are required to handle it for the relevant service and under applicable data protection arrangements. Some recipients, including Stripe for certain activities, act as independent controllers rather than solely on our instructions.

We may disclose relevant information to professional advisers, competent authorities or other parties where necessary to meet legal obligations, obtain advice or establish, exercise or defend legal claims. Access and disclosure should be limited to the information needed for the relevant purpose.

International Processing

Using cloud and payment providers can involve processing or support access outside the UK, including in the European Economic Area and the United States. The location of one database does not determine every location involved in providing the service.

Transfers restricted by UK data protection law require a valid transfer mechanism, such as UK adequacy regulations or approved contractual safeguards with any required assessment and additional measures. You can contact us for information about the recipients, locations and safeguards applicable to your information, including how to obtain relevant safeguard details.

Cookies & Local Storage

We use browser storage for sign-in and interface functionality, including authentication tokens to keep you signed in and preferences such as sidebar state. Blocking or clearing this storage can sign you out or reset those preferences.

Stripe-hosted Checkout and billing pages use their own cookies and similar technologies, including for payment functionality and fraud prevention. See Stripe's Cookies Policy for its explanation. Provider notices do not replace any information or choices we are required to give on our own pages.

Where a technology requires your consent under applicable law, it must not be used before that consent is obtained. We will explain any new use requiring additional notice or choices before introducing it. Agreeing to this Privacy Policy is not consent to optional tracking technologies.

Data Retention

We keep your account profile information while your account exists. When you use Delete Account, we delete that information immediately from our active account database. We do not apply a separate post-deletion retention period to your account profile.

Operational logs held by Vercel follow the default retention settings applicable to the hosting services and plan we use. Payment, invoice and subscription records held by Stripe follow Stripe's retention arrangements, including its legal and fraud-prevention requirements. We use these providers' standard retention arrangements rather than a custom retention period for those provider-held records.

Deleting your datawiser account does not itself erase those separate provider records. Copies in provider-managed backups, where present, remain subject to the applicable backup retention and replacement cycles rather than immediate account deletion.

You can contact us at privacy@datawiser.ai for information about records still held in connection with your account or to make an erasure request. Where a provider processes information on our behalf, you can raise that request with us. Stripe's own Privacy Policy also explains retention and rights for processing for which it is independently responsible.

People Named in Public Disclosures

Separately from subscriber records, our financial-data work involves corporate and securities disclosures, including SEC filings and issuer publications. Where these identify a natural person, the information can include names, company roles, shareholdings, ownership or control relationships, transaction dates and source-document references.

We extract, organise, link and check disclosure information to produce financial research datasets, including ownership and Free Float information. Relevant disclosure-derived information may be made available to users through our data products, API and public research tools. This is distinct from subscriber account and billing information.

Our basis for this processing is legitimate interests in providing accurate, source-linked corporate and ownership data for research and analysis. This requires considering the relevance, necessity and impact on individuals; public availability alone does not remove data protection rights. Retention takes account of the need to explain dated holdings, preserve source provenance and correct historical records, rather than treating every disclosed detail as permanently necessary.

If information about you is inaccurate or you have a privacy concern, contact us with the relevant record or source reference. We will assess your request under the rights described below. We cannot amend a regulator's or issuer's original publication, but can review how datawiser processes the information.

Your Rights

Depending on the circumstances and applicable law, you may ask for access to your personal information, correction of inaccuracies, deletion, restriction of processing or a portable copy of information. You may withdraw consent to processing based on consent; this does not affect earlier lawful processing. These rights are subject to the conditions and exceptions in data protection law.

Your right to object: you may object to processing based on legitimate interests on grounds relating to your situation. We must then assess whether a lawful basis to continue remains. You may object to direct marketing at any time, and we will stop using your information for that purpose.

Contact privacy@datawiser.ai to exercise a right. We may ask for proportionate information to verify your identity and locate the relevant records. We will respond within the applicable legal timeframe and explain any lawful extension or reason we cannot fulfil a request.

Privacy Questions & Complaints

You can raise a privacy concern or complaint using the email or postal details below. We will acknowledge a data protection complaint within 30 days, investigate it appropriately, keep you informed and communicate the outcome without undue delay.

You also have the right to complain to the UK Information Commissioner's Office. Visit the ICO complaints page for its process and guidance. Where applicable, you may also contact the data protection authority in your country.

Changes to This Policy

We may update this notice as our services, practices or legal obligations change. The date above identifies this version. We will provide additional notice of material changes where appropriate and obtain new consent where required. Updating this page does not override your existing data protection rights.

Contact

For privacy questions, rights requests or complaints, email privacy@datawiser.ai or write to:

Company number: 16904026. Please identify the account or disclosure record concerned, but do not include passwords, API keys or complete payment-card details.