Privacy Policy

1. Who We Are

FilingDrift is operated by Latent Systems SAS, a French simplified joint-stock company (SAS). For data protection purposes, Latent Systems SAS is the data controller of personal data collected through this website.

Contact: hello@filingdrift.com

2. What Data We Collect

We collect only the minimum data necessary to provide our service:

• Account data — email address, hashed password, and subscription plan when you create an account.
• Watchlist and preferences — the tickers you add to your watchlist and alert settings.
• Usage data — anonymized usage statistics (pages visited, features used) to improve the product. No personally identifiable information is collected for analytics.

Payment processing is handled entirely by Stripe, Inc. We do not store payment card numbers or billing details on our servers. Stripe's privacy policy applies to data submitted at checkout: stripe.com/privacy.

We do not collect: payment card information, browsing history beyond this site, or any sensitive personal data.

3. Legal Basis for Processing

Under the GDPR (EU Regulation 2016/679), we process your personal data on the following legal bases:

• Contract performance (Art. 6(1)(b)) — for processing necessary to deliver the service you signed up for: sending watchlist alerts, managing your account, and providing access to paid features.
• Consent (Art. 6(1)(a)) — for marketing communications and product announcements beyond the core service. You may withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f)) — for anonymized usage analytics to improve service quality.

4. How We Use Your Data

• To send you email alerts when companies you follow file new 10-K or 10-Q reports with elevated distress scores
• To send product updates, new features, and announcements
• To improve the product based on aggregated, anonymized usage patterns

We will never sell, rent, or share your email address with third parties for marketing purposes.

5. Data Retention

We retain your account data (email, watchlist, preferences) for as long as your account is active. If you cancel your subscription or close your account, your personal data will be deleted within 30 days of closure unless a longer retention period is required by law (e.g., tax records). You may also request deletion at any time by emailing us (see Section 8), and we will remove your data within 30 days.

6. Data Storage and Security

Your data is processed by the following third-party sub-processors, each operating under a Data Processing Agreement:

• Render.com — application hosting and database storage (United States). Relies on EU-US Data Privacy Framework.
• Stripe, Inc. — payment processing. Stripe stores billing data independently under their own privacy policy. See stripe.com/privacy.
• Resend, Inc. — transactional email delivery (alert emails, password resets). Email addresses are transmitted to Resend solely to deliver messages you have requested.
• Plausible Analytics — cookieless, privacy-preserving website analytics. No personal data or cookies are used. See plausible.io/privacy.

We implement reasonable technical and organizational measures to protect your data. As a French company transferring data to US-based processors, we rely on each processor's compliance with applicable data transfer mechanisms (EU-US Data Privacy Framework or Standard Contractual Clauses).

7. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — unsubscribe at any time by emailing us

To exercise any of these rights, contact us at hello@filingdrift.com. We will respond within 30 days.

You also have the right to lodge a complaint with the French data protection authority: CNIL (Commission Nationale de l'Informatique et des Libertés), www.cnil.fr.

8. Contact

For any questions about this policy or to exercise your rights:

Latent Systems SAS
Email: hello@filingdrift.com