Welcome to Founcha. We are committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your personal information. This Privacy Policy explains our data practices for our SEC filings tracking service. By using Founcha, you agree to the collection and use of information in accordance with this policy.

Founcha is a data aggregation service that displays publicly available SEC filing information. We operate primarily as a frontend application with minimal data collection, storing most user preferences locally in your browser.

We collect minimal information to provide and improve our services:

2.1 Information You Provide

• Email Address: When you register for an account, we collect your email address for authentication and account management purposes, including magic link login functionality.
• Alert Preferences: Information about your custom alerts, including symbols, form types, notification preferences, and Discord webhook URLs (if provided), is stored on our servers and associated with your account.

2.2 Automatically Collected Information

• Usage Data: We collect anonymized analytics data about how you interact with our service, including page views, navigation patterns, and feature usage through our self-hosted analytics platform (Matomo).
• Device Information: Basic technical information such as browser type, device type, and operating system to ensure compatibility and improve our service.
• IP Address: For security purposes and fraud prevention, though this is anonymized in our analytics.

2.3 Local Storage

Some data is stored locally in your browser for convenience and performance:

• Authentication tokens (for maintaining your login session)
• User profile information (cached from server)
• Cookie consent preference

We use the collected information for the following purposes:

• Account Management: To create and manage your user account, authenticate your identity, and enable magic link login functionality.
• Service Delivery: To provide access to SEC filing data, TradingView charts, and personalized alert features.
• Analytics and Improvement: To understand how users interact with our service, identify issues, and improve features and user experience. Our analytics are privacy-focused and cookie-less.
• Security: To protect against unauthorized access, fraud, and abuse of our service.
• Communication: To send you authentication emails (magic links) and, if you opt-in, important service updates.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

We do not: Sell your personal information to third parties, use your data for advertising purposes, or share your information with data brokers.

4.1 Where Your Data is Stored

Your account data is stored on our secure servers located in Germany, ensuring compliance with European data protection standards. This includes:

• Email addresses
• Alert configurations (symbols, form types, notification preferences, Discord webhooks)
• Account settings and preferences

For performance and convenience, authentication tokens and cached user profile information are stored locally in your browser's localStorage. This allows you to stay logged in between sessions without repeatedly authenticating.

4.2 Security Measures

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data transmission
• Secure authentication using JWT tokens and magic link technology
• Regular security audits and updates
• Limited access controls to personal data
• Self-hosted analytics to prevent third-party data access

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

4.3 Data Retention

We retain your account information (email, alert configurations, preferences) for as long as your account is active or as needed to provide you services. You may request deletion of your account and all associated data at any time by contacting us. Upon account deletion, all server-stored data will be permanently removed within 30 days.

Locally stored data in your browser (authentication tokens, cached profile) persists until you clear your browser data, log out, or uninstall the application.

We integrate with the following third-party services to provide our functionality:

5.1 SEC EDGAR Database

We retrieve publicly available SEC filing data from the U.S. Securities and Exchange Commission's EDGAR database. This data is already public and subject to the SEC's own privacy policies and terms of use.

5.2 TradingView

We embed TradingView widgets to display interactive stock charts. When you view these charts, TradingView may collect information according to their own privacy policy. We recommend reviewing TradingView's privacy policy for more information about their data practices.

5.3 Self-Hosted Analytics (Matomo)

We use Matomo, a self-hosted, privacy-focused analytics platform. Unlike third-party analytics services, our Matomo instance is hosted on our own servers, meaning your analytics data is never shared with external parties. We have disabled cookies in our analytics configuration and anonymize IP addresses to further protect your privacy.

We do not use Google Analytics, Facebook Pixel, or other third-party tracking services that share your data with advertising networks.

Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You can request deletion of your account and associated personal data at any time.
• Right to Restrict Processing: You can request that we limit how we use your personal data.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to our processing of your personal data in certain circumstances.
• Right to Withdraw Consent: You can withdraw your consent to data processing at any time by deleting your account.

To exercise any of these rights, please contact us at support@founcha.com. We will respond to your request within 30 days.

Since most of your data is stored locally in your browser, you can also delete this data at any time by clearing your browser's localStorage or cache.

Founcha takes a privacy-first approach to cookies and tracking technologies.

7.1 Essential Cookies

We use one essential cookie to remember your cookie consent preference (founchaCookieConsent). This cookie is necessary for the website to function properly and is set only after you make a choice in the cookie consent banner.

7.2 Analytics Cookies

We use Matomo, a self-hosted analytics platform, to understand how our service is used. Matomo sets cookies to track user sessions and collect anonymized usage statistics. These cookies include:

• _pk_id: Used to store a unique visitor ID (valid for 13 months)
• _pk_ses: Short-lived session cookie (valid for 30 minutes)

All analytics data is stored on our own servers and is never shared with third parties. IP addresses are anonymized to protect your privacy.

7.3 Third-Party Cookies

TradingView widgets may set their own cookies when you interact with the charts. These are controlled by TradingView's privacy policy, and we have no control over these cookies.

7.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for certain websites. Please note that disabling essential cookies may affect the functionality of our website.

For more information about cookies and how to manage them, visit www.allaboutcookies.org.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you of significant changes through a notice on our website or via email if you have an account
• Give you the opportunity to review the changes before they take effect for material modifications

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of Founcha after any changes indicates your acceptance of the updated Privacy Policy.