Privacy Policy

Privacy Highlights

At ResearchArch, we are committed to protecting your privacy and ensuring transparency in how we collect, use, and safeguard your personal information. This Privacy Policy explains our data practices for our financial research platform and services.

1. Information We Collect

Information You Provide

• Account Information: Name, email address, and password when you create an account
• Profile Information: Additional information you choose to add to your profile
• Watchlists & Portfolios: Stock symbols, portfolio holdings, and investment preferences you save
• Communication Data: Messages you send through contact forms or support requests
• Payment Information: Billing details processed securely through our payment providers

Information Collected Automatically

• Usage Data: Pages visited, features used, search queries, and time spent on the platform
• Device Information: IP address, browser type, operating system, and device identifiers
• Cookies & Tracking: Session cookies, preference cookies, and analytics cookies
• Log Data: Access times, error logs, and performance metrics

Information from Third Parties

• Market Data Providers: Financial data from NASDAQ, SEC EDGAR, and other leading financial data sources
• Authentication Services: If you use social login features
• Analytics Partners: Aggregated usage statistics and trends

2. How We Use Your Information

We use your personal information to:

• Provide Services: Deliver market data, research tools, portfolio analytics, and personalized insights
• Maintain & Improve: Enhance platform performance, fix bugs, and develop new features
• Personalization: Customize your experience based on your preferences and usage patterns
• Communication: Send account notifications, service updates, and optional marketing communications
• Analytics: Understand usage patterns, measure feature effectiveness, and identify trends
• Security: Detect fraud, prevent abuse, and protect against security threats
• Legal Compliance: Meet regulatory requirements and respond to legal requests

3. How We Share Your Information

We do not sell your personal data. We may share your information with:

• Service Providers: Cloud hosting (AWS), payment processors, analytics tools, and email services
• Data Partners: Market data providers (NASDAQ, SEC EDGAR, and others) to deliver financial information
• Legal Requirements: Law enforcement, regulatory authorities, or courts when legally required
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• With Your Consent: When you explicitly authorize information sharing

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted over HTTPS/TLS; passwords hashed with bcrypt
• Access Controls: Role-based permissions and authentication tokens (JWT)
• Infrastructure Security: Secure cloud hosting with AWS, regular security updates
• Monitoring: Continuous security monitoring and incident response procedures

While we take extensive precautions, no internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations and resolve disputes
• Enforce our agreements and protect our legal rights

When you delete your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

6. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and personal data
• Portability: Export your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications
• Cookie Control: Manage cookie preferences through browser settings
• Object to Processing: Object to certain uses of your personal data

To exercise these rights, contact us at privacy@researcharch.com

7. Cookies & Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Authentication, security, and core functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Understand usage patterns and improve our services
• Marketing Cookies: Deliver relevant content and measure campaign effectiveness

You can control cookies through your browser settings, but disabling cookies may limit platform functionality.

8. Third-Party Services

Our platform integrates with third-party services:

• OpenAI: AI-powered insights and analysis features
• NASDAQ: Real-time and historical market data
• Payment Processors: Secure payment processing for subscriptions
• Analytics Tools: Usage tracking and performance monitoring

These third-party services have their own privacy policies. We recommend reviewing their policies to understand how they handle your data.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@researcharch.com.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have different data protection laws than your jurisdiction.

We ensure appropriate safeguards are in place to protect your information during international transfers, including:

• Standard Contractual Clauses approved by regulatory authorities
• Privacy Shield frameworks (where applicable)
• Other legally recognized transfer mechanisms

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending email notification for significant changes
• Displaying a prominent notice on the platform

Your continued use of our services after changes take effect constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Additional Rights for Specific Jurisdictions

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising your privacy rights

European Economic Area (GDPR)

If you are in the EEA, you have rights under the General Data Protection Regulation:

• Right to access, rectification, erasure, and data portability
• Right to restrict processing and object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority