This policy explains what Gravy Brands LLC ("TapeRank", "we") collects when you use the TapeRank website and application, why, who processes it, and what you can do about it. The short version: we collect what is needed to run an account, take a payment and send the alerts you asked for, and nothing for advertising.
What we collect
| Data | Why | Where it lives |
|---|---|---|
| Account identity: the email address, name and identifier your sign-in method provides | To create and secure your account | Clerk (our identity provider) and, as a copy, our database |
| Payment details: card, billing address, subscription status | To bill the Pro plan | Stripe. Card details never reach us; we store your Stripe customer and subscription identifiers and the resulting plan status |
| One session cookie on the API host | To keep you signed in for up to seven days | Your browser; an httpOnly, same-site cookie readable only by the API |
| Your settings: presets, filters, pinned names, alert preferences | To show you your list and to send alerts for pinned names while your tab is closed | Our database |
| Push subscriptions: the endpoint your browser issues when you enable notifications | To deliver the alerts you turned on | Our database; messages are relayed by your browser vendor's push service |
| Alert history: which alerts fired for your account | To answer "what did I miss" after a restart | Our database |
| Referral cookie, set only when you arrive by a partner's link | To credit the partner if you subscribe | Your browser, as one cookie on taperank.com holding a referral identifier; PromoteKit, our affiliate service. Your account and card details never reach it — Stripe tells it that a referred subscription happened |
| Server logs: request paths, status codes, timings, IP address, user agent | Security, rate limiting and diagnosing failures | Our hosting provider's log store, retained for 30 days |
| Usage analytics: pages viewed, clicks, session recordings of the application's screens, the campaign link or site you arrived by, and your plan | To learn which pages and channels bring people to TapeRank and where they get stuck | PostHog, in the United States, tied to your account once you sign in; a copy of where you arrived from is kept in our database |
Analytics and cookies
PostHog runs on the website and in the application. It sets one analytics cookie on taperank.com, which is what lets us tell that the person who read the pricing page is the one who later signed up, and it records the pages you view, what you click, and recordings of the application's screens as you use them. It never receives positions, brokerage data or card details, because the application does not hold any of those. Besides that cookie, the application sets the one session cookie described above and uses browser storage for display preferences and for the campaign link you arrived by.
If you arrive by a partner's link, PromoteKit sets one referral cookie on taperank.com so the partner is credited when you subscribe. It holds an anonymous referral identifier and nothing about you, and it is set only on that first visit.
What we do not do
- No advertising scripts run on the website or in the application.
- We do not sell personal data or share it for advertising.
- We do not build profiles of your trading; the application holds no positions and receives no brokerage data.
Processors
Clerk provides sign-in. Stripe processes payments and hosts the checkout and customer-portal pages. PostHog stores the usage analytics, in the United States. PromoteKit runs the affiliate program and is told by Stripe when a referred subscription starts. Microsoft Azure hosts the application and database in the United States. Push notifications are relayed by the push service of your browser vendor. Each processes data under its own privacy terms and our agreements with it. Market data, filings and news displayed to you come from data vendors and the SEC and involve no personal data of yours.
Automated processing
The AI verdicts are generated from public filings, news and market data, not from anything about you. No personal data is sent to a model provider.
Retention
Account data is kept while your account exists. Logs are kept for 30 days. Stripe retains payment records as the law requires it to. When your account is deleted we delete your settings, pins, push subscriptions and alert history, and cancel any active subscription first.
Your rights and choices
- You can change your presets, pins and alert settings in the application at any time.
- You can withdraw push permission in your browser; the subscription is then removed.
- You can update payment details or cancel from the customer portal in the application.
- To access, correct or delete your data, or to delete your account, email support@taperank.com from the address on the account. We respond within two business days.
- Depending on where you live you may have further rights under laws such as the GDPR or the CCPA, including the right to complain to a supervisory authority. We honor them.
Security
Traffic is encrypted in transit. Secrets are held in a managed vault. Sign-in is delegated to Clerk and payments to Stripe so that neither passwords nor card numbers pass through our systems. No system is perfectly secure; if we learn of a breach affecting your data we will tell you as the law requires.
Children
The Service is not directed at anyone under 18 and we do not knowingly collect data from them.
Changes
We may update this policy. The effective date above changes when we do, and material changes are announced in the application at https://app.taperank.com or by email.
Contact
Gravy Brands LLC, doing business as TapeRank. support@taperank.com.