Last updated: January 2025
This Privacy Policy describes how Cyclops Digital LLC ("we," "us," or "our") collects, uses, and protects information when you use the EFTA Investigation Platform ("Platform"). We are committed to protecting your privacy and handling your data responsibly.
You can create an account at /signup. When you do, we collect your email address, a password, and a display name. Passwords are handled and stored by our authentication provider, Supabase, in hashed form. We don't store them. We store your email address, display name, account role and subscription tier, and the date your account was created. If you add a profile photo or short bio, or start a paid subscription, we also store those details and the Stripe customer reference. We send a confirmation email to verify your address.
If you sign up for the weekly briefing, we store your email address and the page you signed up from. We use it only to send the briefing, which is delivered through our email provider, Buttondown. We do not sell or share it. Every email includes an unsubscribe link.
Card donations are processed by Stripe, and Ko-fi donations by Ko-fi. We never see or store your card details. We keep a record of the donation amount, date, and the email address the processor gives us.
We automatically collect information about your use of the Platform, including: pages visited, search queries, documents viewed, features used, timestamps of activity, and IP addresses. This data is used for security monitoring and platform improvement.
Interactions with the AI research assistant (Detective) are logged, including queries, conversations, and suggested actions. This data is stored to maintain conversation history and improve research capabilities.
We do not sell, rent, or share your personal information with third parties for marketing purposes. Your data may be shared only in the following circumstances:
Your data is stored on secure servers provided by Supabase (database and authentication) and Cloudflare R2 (document storage). We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), row-level security policies, and access logging.
The Platform uses essential cookies for authentication session management only. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Your session cookie is necessary for the Platform to function and expires when you log out or after a period of inactivity.
Account information is retained for the duration of your account. Usage logs and research activity are retained for security and research continuity purposes. Upon account deletion, your personal data will be removed, though anonymized usage data may be retained.
You have the right to:
To exercise these rights, contact Cyclops Digital LLC.
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date. Continued use of the Platform after changes are posted constitutes acceptance of the revised policy.
For privacy-related questions or requests, contact Cyclops Digital LLC.