Privacy Policy

• Account information. When you sign up we collect your email address, and, if you sign in with Google, your name and the identity information Google shares with us. Authentication is handled by Supabase.
• Content you provide. The inputs you submit to generate reports, including company tickers, investment theses, and framing questions, and the reports and models the Service generates for you.
• Usage information. Product analytics events such as pages viewed, reports created and downloaded, sign-in method, and errors encountered. These events can include the content of your inputs (for example, your investment thesis) so that we can understand and improve how the Service is used.
• Payment information. Payments are processed by Stripe. We receive and store purchase records (what was bought, when, and by which account) but never your card number.

• To provide the Service: generate reports, store them in your account, and deliver them to you.
• To process payments and maintain your report-credit balance.
• To understand usage, fix errors, and improve the Service.
• To secure the Service, prevent abuse, and comply with legal obligations.
• To communicate with you about your account and your reports.

DBOT generates reports using third-party large language model providers. The inputs you submit (ticker, company name, investment thesis, framing questions) and related market data are sent to one or more of these providers, including Anthropic, OpenAI, Google, and DeepSeek, to produce your report. We do not permit these providers to use your data for advertising.

We share information with the service providers that run the Service:

• Supabase: authentication and database hosting (United States).
• Google Cloud: application hosting and storage of generated report files (PDFs, spreadsheets, charts), served through expiring signed links.
• PostHog: product analytics and error tracking.
• Stripe: payment processing.
• SendGrid: transactional email, such as report delivery.
• LLM providers (Anthropic, OpenAI, Google, DeepSeek): AI report generation, as described above.
• Market data sources (such as Yahoo Finance and Alpha Vantage): these receive the ticker being analyzed, not your personal information.

We do not sell your personal information, and we do not share it with third parties for their own advertising.

We use cookies and similar technologies to keep you signed in (Supabase authentication) and to measure product usage (PostHog). We do not use third-party advertising cookies.

We retain your account information and generated reports for as long as your account is active; generated reports do not expire by design. Analytics data is retained by our analytics provider in accordance with its retention settings. If your account is deleted, associated records are deleted with it.

You may request a copy of your data or ask us to delete your account and associated data by contacting us at [contact email]. Depending on where you live, you may have additional rights under applicable privacy laws (such as access, correction, deletion, and portability); we will honor valid requests as required by law.

We protect your information with industry-standard measures, including encryption in transit, row-level access controls on our database, and expiring signed links for report files. No system is perfectly secure, so we cannot guarantee absolute security.

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

The Service is hosted in the United States. If you use it from elsewhere, you understand that your information is processed and stored in the United States.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service.

Questions about privacy? Contact us at [contact email].