Privacy

This notice explains how Disclosery uses information when you browse filings, sign in or use its API. For privacy questions or requests, contact info@disclosery.com.

Updated October 6, 2026.

Accounts and sign-in

Email sign-in uses your email address to send a single-use link and identify your account. If you choose Google sign-in when offered, Google supplies your email address, verification status and a Google account identifier. We store the email address and identifier to sign you in. The requested Google permissions are openid and email, not access to Gmail, Drive or contacts. Google's access token is used for that identity check and is not saved in the account database.

Google sign-in can create an account before you separately confirm your email. Google establishes mailbox ownership for Gmail and matching Google Workspace addresses; other addresses are confirmed through an email sign-in link. You can follow entities before confirmation, but forum participation requires a confirmed email.

Account records include creation time, email confirmation status, plan, sign-in source category, followed entities and email preferences. API keys have a name, display prefix, creation and last-use times, and revocation status. The database stores hashes of API keys, session tokens and email sign-in tokens. When billing is enabled, account records can also include Stripe customer and subscription identifiers and billing status.

Cookies and browser storage

Security cookies support your session, protect forms against cross-site requests and bind Google sign-in to your browser. Sessions last up to 30 days and can renew while you use the site. Email links expire after 15 minutes and Google sign-in attempts after 10 minutes. Signing out removes the current session.

A tagged arrival link can set a signed cookie for up to seven days to record whether a new account arrived through MCP, the API or another source. Only a source category is saved on the account, not the original campaign text. Your theme and table layout choices are stored locally in your browser. You can clear cookies and local storage through your browser settings.

Usage measurement and security

Public pages use our Matomo installation at analytics.internet1.cz to measure visits. The tracker disables analytics cookies and respects the browser's Do Not Track setting. It sends the page path without query parameters or URL fragments, uses that path instead of the page title, and reduces the referring address to its origin. Sign-in, account, follow, billing and forum routes do not load this tracker. The analytics server still receives connection information such as your IP address and browser details.

The service uses IP addresses or API-key identifiers to enforce request limits and deter abuse. Anonymous API quota keys and sign-in rate-limit keys use hashed identifiers. Web, application and mail logs can contain connection details, request paths, timestamps, errors and delivery information needed to operate and troubleshoot the service.

Service providers and public filings

Hosting and mail systems process requests and deliver sign-in links or selected filing alerts. Google processes your Google sign-in if you choose it. Stripe processes payments if paid billing is available. These providers also apply their own privacy policies. If you connect an external AI client, its provider may process your prompts and returned filing data under its own terms.

The ownership records displayed by Disclosery come from public SEC filings and may contain people's names and other information reported to the SEC. They are separate from your private sign-in and account records.

Retention and your choices

The application runs daily cleanup of expired sign-in links, Google sign-in attempts and sessions. Account records, preferences and API-key metadata have no automatic deletion deadline. Operational logs and backups can retain copies beyond changes to the live account.

You can sign out, revoke API keys, remove follows and change email preferences in your account. To request access, correction or deletion of account information, email info@disclosery.com. We may need to verify that the account belongs to you before acting on a request.