Privacy

Authentication and payments

Clerk processes authentication for Blindspot Research. Stripe processes subscription payments. Blindspot does not use those services to personalize research or connect to a brokerage account.

Account and subscription records

Railway hosting and its Postgres database store the minimum account, subscription, and permitted member-state records needed to operate the product. The database stores a Clerk account identifier and a limited projection of subscription status; Stripe remains the payment system of record.

Permitted member state is limited to product settings and research progress. It does not include source images, OCR output, uploaded-file metadata, account identifiers, holdings, position data, or transaction history.

First-party measurement

When enabled, Blindspot records a short-retention, first-party funnel count for visits, app-account creation, Checkout initiation, webhook-confirmed entitlement, and first successful analysis. It stores only an opaque server-derived session value, coarse time/status, and sanitized campaign source, campaign, and medium values. It does not store email, Clerk or Stripe identifiers, tickers, research output, screenshots, OCR, prompts, holdings, or P&L in this measurement record. Measurement rows are retained for no more than 30 days.

Support requests

Support submission requires a signed-in Clerk session. Blindspot stores only the reply email, selected category, request reference, status, and timestamps needed to respond. The form does not accept a message, screenshots, OCR, account numbers, portfolio or holding information, P&L, or prompts. Support requests are retained for no more than 90 days and are not used for analytics. To prevent abuse, the server stores a non-reversible HMAC bucket derived from the verified Clerk subject with a distinct secret; it never stores the raw subject, IP, or user-agent, and the bucket expires within 24 hours.

Images and portfolio information

If you voluntarily use a screenshot or image in the research flow, the original image, OCR text, account identifiers visible in the image, and holding values are used only in the current local browser session. They are not stored in the Blindspot account, subscription, or member-state records.

Blindspot does not request brokerage credentials or import brokerage holdings.

Questions

For questions about this privacy information, contact support through the support channel provided in the product.