Privacy Policy

Information Collected

The platform may store your email address, name, phone number, plan, entitlement status, identity provider metadata, API key records, intake requests, and administrative audit events.

Authentication is handled by a hosted identity provider. Starting Index does not store local account passwords.

How Information Is Used

Information is used to provide subscriber access, route admins to management tools, respond to requests, process billing, monitor abuse, maintain audit history, and operate subscriber support.

Subscriber account data is not sold. Analytics and support data are used to understand site usage, improve the product, protect the service, and respond to customer needs.

Existing Site Analytics

Existing site analytics continue whether you allow or decline additional PostHog analytics. They record page visits, referring website hosts when available, time-on-page estimates, browser and device information, viewport dimensions, and country information when supplied by hosting headers.

The existing collector uses a random visitor identifier in localStorage and a session identifier in sessionStorage. The visitor identifier has no expiry set by this collector and can remain until browser storage is cleared. Its database stores hashed browser/session identifiers and IP addresses. Signed-in activity can be associated with a hashed account email. These records are not anonymous.

The existing browser collector checks Do Not Track before starting page measurement. The additional analytics choice does not change this collector or account, access, billing, audit, and security records.

Additional PostHog Analytics

The analytics choice controls only this additional layer. When enabled and allowed, it measures allowlisted public page visits and campaign labels, verified completed signup and account/access observations, and whether published allocation rows were visible. It uses browser/session identifiers. Prompt signup completion is checked against the original hosted signup session; this does not establish a complete account-creation census, report read, trade, or investment result.

With your analytics choice allowed, a short-lived signup-attempt locator can stay in this tab's session storage for up to five minutes. It is sent only to Starting Index to look up and verify completed signup; it is not sent to PostHog and is not authentication or proof of completion. Withdrawal or switching accounts clears it when storage is available. Missing or unavailable proof suppresses the optional observation.

The transmitted event JSON excludes email, raw account identifiers, full URLs and referrers, report contents, and financial holdings. This layer does not use replay, identify/alias, or person profiles. Network addresses and request headers are separate from that JSON filtering; provider handling and retention are separate from browser cookie expiry.

Your additional analytics choice is remembered for up to 30 days in a Secure, SameSite=Lax cookie. When allowed and enabled, PostHog uses a 30-day primary cookie and transient tab/session storage, without a persistent localStorage profile. Its cookie can retain page URLs and referrers and accompany requests to Starting Index. Cookie writes can refresh expiry.

You can change the additional analytics choice in Privacy settings. Declining stops new additional event capture in the current page; previously consented requests and retries may finish. Existing site analytics continue. Changing this choice does not delete records already received. If saving a refusal fails, the current page stays off for additional capture, but an older saved choice may return after reload.

Data Handling

Application state is designed to live in a mounted database volume rather than inside the container image. Published model artifacts are generated by the research publication pipeline and are designed to exclude brokerage credentials, private account payloads, and local file paths.