Privacy

Who is responsible

Subsidiary legal operator: Financial Markets Lab. Contact: Privacy contact not yet provided.

FinMarketsLab.ai operates in Canada as a subsidiary of IP Factory Holding Corp.. The parent relationship does not identify the parent as the legal operator or the organization responsible for personal information. Operating province: British Columbia. Corporation number: Subsidiary corporation number not yet provided. Address: Postal address not yet provided.

What we collect directly

If you create an account, we store the email address and password you register with (the password is held by the sign-in service, not readable by us), plus what you choose to save in the app: watchlists, research notes, saved scenario assumptions and preferences such as display name, default company and chart style. These are private to your account. The site has no contact form, payments or newsletter.

The company and report search filters run in your browser and aren't sent anywhere. The Ask ATORA availability check sends the question, ticker and request context you enter to our server to check availability only; it isn't sent to ATORA, and the app doesn't intentionally keep it. How long the hosting platform's logs keep it hasn't been confirmed, so we can't guarantee it's never stored.

What happens when you visit

• Hosting: the site is hosted on Lovable's platform. Like any web host, it receives your IP address, browser details and the pages you request in order to serve them, and may keep request logs. Log retention hasn't been confirmed yet.
• Web fonts: your browser loads fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), so Google receives your IP address and browser details.
• Error reporting: if a page fails, the error message, technical details and the page address may be passed to an error-reporting tool from the hosting platform, if it's present. Server errors are written to server logs.
• ATORA: our server requests reports from ATORA AI. These requests contain no information about you.
• SEC, Marketstack and Alpha Vantage: when configured, our server requests company filings from the US SEC and end-of-day prices from Marketstack. Requests to the SEC carry the company's CIK number and our configured operator identity and contact email (the User-Agent the SEC requires). Requests to Marketstack carry the company ticker, the requested date range and our server-side access credential. We don't intentionally forward any information that identifies you to these providers. Alpha Vantage receives the company ticker, requested data function and our server-side credential for optional overview data or a price fallback.

Cookies and storage

The site's own code sets no advertising or tracking cookies. If you sign in, the sign-in service keeps your session in your browser's local storage so you stay signed in. See Cookies & Storage for what we haven't yet verified.

Canadian privacy law

The operating province is British Columbia. British Columbia's Personal Information Protection Act (PIPA) may apply to provincial private-sector activities. The federal Personal Information Protection and Electronic Documents Act (PIPEDA) may additionally apply to commercial interprovincial or international flows of personal information and to federally regulated businesses. Alberta and Quebec also have substantially similar provincial private-sector laws; applicability depends on the activities and jurisdictions involved. We have not yet determined all applicable obligations and do not claim compliance certification.

See the Office of the Privacy Commissioner of Canada's guidance on provincial laws and PIPEDA.

Your rights

Depending on where you live, you may have rights to access or correct personal information, or to complain to a regulator. If PIPEDA applies, the Office of the Privacy Commissioner of Canada (OPC) may be the appropriate complaint channel. If provincial law applies, the applicable provincial commissioner may handle complaints, including the British Columbia OIPC, Alberta OIPC or Quebec's Commission d'accès à l'information. The appropriate regulator depends on the province, activity and law involved.

Until contact details are published, there's no way to send us a request through this site. This does not remove any applicable rights or access to a regulator's complaint process.

Still to be confirmed

Retention periods, a full list of service providers, cross-border data transfers and applicable privacy obligations. Target customer countries remain unconfirmed; a Canadian operating base does not establish worldwide privacy compliance.