← SECFacts

Privacy Policy

Last updated: August 23, 2026 · SECFacts is operated by Big Vision Systems LLC — reach us through bigvisionsystems.com.

What we collect

An anonymous identifier cookie (so the free tier works without an account); if you sign in with Google, your Google account email address and name — used only to identify your account across devices, never to post or send email on your behalf; your questions and the generated answers, charts, and report files (to operate the Service and show you your work); plan, credit, and usage counters; and, if you subscribe, the billing identifiers Stripe provides. Payment card details never touch our servers — Stripe processes all payments.

What we don’t do

No advertising, no selling or renting of personal data, no third-party tracking or analytics cookies. The only cookies we set are the ones the Service needs to function (your identifier and, if you sign in, your session).

Service providers we share data with

We use a small set of processors, each only for its function: Anthropic (your questions and retrieved filing excerpts are sent to the Claude API to generate answers, subject to Anthropic’s data-use terms); Stripe (payments and subscription state); Google (sign-in only — we receive your email and name, nothing else); Vercel and Neon (hosting, file storage, and database). Filing data is fetched from the SEC’s public EDGAR system with an identifying User-Agent, as the SEC’s fair-access policy requires. We disclose data beyond this only if required by law.

Retention and deletion

Generated report files are retained for a limited period (currently about 30 days) and then deleted. Account, plan, and usage records are kept while your account is active. Contact us through bigvisionsystems.com to request access to or deletion of your data; we will verify the request and delete associated records and files, except records we must keep for legal, tax, or billing-dispute purposes.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, and to object to or restrict certain processing. We honor such requests regardless of jurisdiction where practical — use the contact above.

Security & children

Data is encrypted in transit (TLS) and access to production systems is restricted. No method of transmission or storage is perfectly secure, but card data never reaches us and sign-in is delegated to Google. The Service is not directed to children and may not be used by anyone under 18.

Changes

We may update this policy; material changes will be reflected by the date above. Not affiliated with the U.S. Securities and Exchange Commission — see our Terms.