Privacy Policy
Last updated: April 21, 2026
BetterEDGAR is a minimal service. This page tells you exactly what we collect, why, and who else sees it. We don't sell data, run ads, or keep usage logs beyond what the product requires.
What we collect
When you sign in
- Email address — for sign-in and critical account notifications.
- Display name — provided by you or by your Google account on sign-in.
- Google profile data — if you use Google OAuth: Google user ID, profile image URL, and email. We don't request drive, contacts, or any other Google scopes.
- Password / OAuth tokens — stored encrypted. Password hashes are never returned to the client.
When you use the service
- IP address — handled by Cloudflare for abuse prevention and rate limiting. Not stored long-term by us.
- Usage counter — the number of API / MCP calls you've made this month, used to enforce quotas. Resets monthly.
- Last-request timestamps on API keys — so you can tell whether a key is still in use from your Account page.
- OAuth tokens you issue — if you connect BetterEDGAR to a third-party agent (ChatGPT, Claude, Cursor), we store the issued token references to honor subsequent requests. You can revoke at any time from Account.
When you pay
- Polar customer ID — a pointer to your account with our payment processor, Polar. We never see your payment card details; Polar handles billing directly.
What we don't collect
- The content of your searches. Search queries are not stored or analyzed for ads, and not shared with third parties.
- Payment card numbers. Polar handles all payment data.
- Analytics / tracking cookies. No third-party ad trackers.
- Any data beyond what the service needs to authenticate you, run your searches, and bill you accordingly.
Third-party processors
We rely on these sub-processors to deliver the service:
- Cloudflare — hosting, DNS, rate limiting, bot protection, email delivery.
- Polar — subscription billing and payment processing.
- Google — optional OAuth sign-in; we receive only the scopes listed above.
- SEC EDGAR — the source of filing data. When you search or fetch a filing, the underlying data comes from the SEC's public servers, with enrichment from us.
Cookies and local storage
We use a session cookie to keep you signed in and a theme preference stored in local storage. No advertising cookies, no third-party analytics cookies.
Data retention
- Account data is kept while your account is active. On account deletion, it is removed within 30 days, except where retention is required by law or by our billing processor (Polar).
- Usage counters reset monthly; historical monthly totals are not retained.
- IP logs are short-lived (Cloudflare defaults, typically ≤30 days) and used for abuse prevention only.
- Billing records are kept by Polar as required by financial regulations.
Your rights
You may:
- Access or export your account data.
- Correct inaccuracies.
- Delete your account.
Email hello@better-edgar.com to exercise any of these. If you're in the EU / UK (GDPR) or California (CCPA), you have specific statutory rights that we honor; the same email reaches us.
Children
BetterEDGAR is not intended for anyone under 18. We do not knowingly collect data from children.
Security
Data is stored on Cloudflare's infrastructure. OAuth tokens are encrypted at rest. API keys are hashed; the plaintext is shown exactly once at creation and never stored in a recoverable form. No system is perfectly secure — if you suspect a breach of your account, contact us immediately.
International transfers
Our infrastructure is global (Cloudflare). By using the service you consent to your data being processed in regions outside your own, with appropriate safeguards.
Changes to this policy
Material changes will be reflected on this page with an updated "Last updated" date. For substantial changes we'll notify signed-in users by email.
Contact
Privacy questions: hello@better-edgar.com.