This page lists every piece of information delaxcom.org gathers, why, and who else sees it. If something here doesn't match what the site actually does, that's a bug, and we'd like to hear about it.
DELAX GEO-RISK (delaxcom.org) is run by DelaxCom LLC, an Iowa company. "We" on this page means DelaxCom LLC.
DelaxCom LLC| What | Where it goes and why |
|---|---|
| Visit statistics | Google Analytics records the pages you open, roughly where you are (country or city), your device and browser type, and the page that sent you. We use this to see which pages help people and which don't. Details and how to turn it off. |
| Anonymous traffic counts | Vercel, which hosts the site, provides Web Analytics and Speed Insights. Both count page views and load times without cookies and without identifying you. |
| Your account | Only if you sign in with Google: your email address and account ID, plus the books and watchlist you save. Stored in our database, hosted by Supabase. Details below. |
| Waitlist and demo requests | Only what you type in. Details below. |
| Your holdings and settings | Without an account, saved in your own browser's storage, not on our servers. Details below. |
| Server logs | Like every website, our host, Vercel, briefly records each request: your IP address, the page asked for, the time and your browser type. We use these logs only to keep the site working and to spot abuse. |
We don't take payments, and we don't ask for your home address.
The dashboard and the Investor Workspace load Google Analytics 4. It stores two first-party cookies (_ga and _ga_KEK0Q8HN11) that let it tell a returning visitor from a new one. They last up to two years. Google processes this data for us under its own policies. Google Analytics 4 does not log or store IP addresses.
We have turned off all of Google's advertising features. Advertising cookies, ad personalisation and sharing data with Google for ads are disabled everywhere, for everyone.
When analytics is off, Google sets no cookies on your device. Google may still receive a signal that a page was viewed, with no identifier attached, which it uses only for overall totals. Your choice is saved in your browser, so clearing your browser's site data resets it.
You can also block Google Analytics on every website with Google's opt-out browser add-on.
Our pages load fonts from Google Fonts and chart code from the jsDelivr network. Like any web request, these send your IP address to those services so they can deliver the file. We don't send them anything else.
Signing in is optional. When you sign in with Google, we receive your email address and an account ID. We never see your Google password. When you save a book, we store its name and, for each holding, the ticker, number of shares, cost and sector. Your watchlist is stored the same way. A saved book stores holdings only, never a score: every figure is recalculated when you open it. Our database and sign-in are hosted by Supabase.
Please don't put account numbers, passwords or other sensitive details into a book name or a note.
To delete your account, email contact@delaxcom.com from the address you signed in with. Deleting your account deletes its saved books and watchlist. Signing out on a shared device removes the account's books from that device.
If you join the waitlist, we receive your email address together with the feature that prompted you, the scenario you were viewing, your browser type and the page that referred you. It arrives as an email to contact@delaxcom.com, sent through our email provider, Resend. A copy of the address is also saved in your own browser, in case the network fails.
If you request a demo, we also receive your name, what you're interested in and any note you write, delivered the same way.
We use these for one thing: replying to you, or telling you when Pro opens. We won't add you to any other mailing list without asking. To have them deleted, email contact@delaxcom.com and we'll delete it within 30 days.
Pro is a subscription. You subscribe on Stripe's own payment page, and we never receive your card number. So that the payment reaches your account, the link to that page carries your account ID (a random code, not your email). When the payment goes through, our server asks Stripe for your Stripe customer and subscription IDs and the date the paid period ends, and Pro switches on automatically for the email address of the account you signed in with (not the address typed on Stripe's page). Stripe also tells us when the subscription renews, is cancelled, fails to renew or is refunded. You manage or cancel the subscription with Stripe.
We also store when your paid subscription started, so we can count your paid days. If you cancel, we never delete your saved books. A free account keeps one book in use: the one you created last. Your other books are kept for you and unlock when you resubscribe. If you had 90 or more paid days, you can still open them, read-only. You can delete any of them at any time.
A free trial works differently: when you press "Request a free trial", we receive the request and approve it by hand. There is one trial per email address.
For each Pro member we store a Pro record. It holds your email address, whether Pro is waiting, on or ended, how you got it (subscription, trial or given by us), the date it ends or renews, when you asked, who or what switched it on and when, your Stripe customer and subscription IDs, and any short note you or we add. You can read your own record by signing in. Only our administrators can see everyone's. The record does not hold anything about your holdings.
To have your Pro record deleted, email contact@delaxcom.com from the address you signed in with. Stripe keeps its own payment records under its own privacy policy and the law.
Each AI explanation costs us money, so we count how many each visitor asks for in a day. If you're signed in, the count is kept under your account ID, and your browser sends a sign-in token with the request so our server can check your account and whether you have Pro. The AI provider never receives that token. If you're not signed in, the count is kept under a scrambled code made from your internet address and the date. We can't turn it back into the address, and it changes every day.
We keep only that code or account ID, the date and the count, and delete them after about a week.
Unless you sign in and save to your account, the Investor Workspace keeps your holdings (tickers, number of shares, cost), any sectors you assign, your saved books and your watchlist in your browser's local storage. The exposure score, the scenario figures and the exports are always calculated on your device. Your theme and text-size settings are stored the same way. To erase all of it, clear this site's data in your browser settings, or delete a book or watchlist item in the Workspace.
Apart from saving to your account, only a few actions send anything about your holdings to our server, and then only a ticker symbol, never your quantities or costs. What happens next is described under Who processes it for us.
We use a small number of processors (called service providers under California's privacy law, the CCPA). Each one processes personal data only on DelaxCom LLC's instructions, and only for the purposes described on this page.
| Processor | What it does for us |
|---|---|
| Vercel | Hosts the application, delivers it through its edge network and keeps the request logs. Also provides the cookie-free Web Analytics and Speed Insights. |
| Supabase | Hosts our database and sign-in. |
| Resend | Delivers waitlist and demo-request emails to us. |
| Stripe | Takes Pro subscription payments on its own page and tells us when a payment, renewal, cancellation or refund happens. We receive those records, never your card details. |
| Runs Google Analytics for us. When you sign in with Google, your Google account itself is handled by Google under its own privacy policy. | |
| A market-data provider | Receives only a ticker symbol, so we can look up which industry the company is in. |
| An AI language-model provider | Writes the AI explanations. For a holding, it receives only the ticker, its public price figures and the scenario you're viewing. For the dashboard's AI features, it receives public headlines and market figures. If you type a question into the What-If box or the globe search, it also receives your question. Please don't type personal details into it. |
The requests to the market-data and AI providers do not identify you.
Our pages also load fonts from Google Fonts and chart code from jsDelivr, as described above; they receive your IP address only to deliver the file.
We do not sell, rent or trade personal information, and we don't share it for advertising. We would disclose information only if the law required us to.
Your account data, logs and related personal data may be processed in the United States. Transfers from the EEA, the UK and Switzerland rely on each processor's standard contractual clauses, or on the EU-US Data Privacy Framework where the processor is certified under it.
Wherever you live, you can ask us to tell you what we hold about you, correct it, or delete it. Email contact@delaxcom.com and we'll reply within 30 days. In practice, we hold only what is listed above: your account and saved books if you signed in, and a waitlist or demo request if you sent one. Analytics data sits with Google, and choosing "No thanks" stops any more from being collected.
If you are in the EU or the UK, our legal basis for analytics is your consent, for your account it is providing the service you signed up for, and for the waitlist and demo requests it is your request that we reply. You may also complain to your local data protection authority.
This site is for adults interested in markets. It is not aimed at children under 13, and we don't knowingly collect information from them. If you believe a child has given us an email address, tell us and we'll delete it.
If we change what we collect, we'll update this page and the date at the top before the change takes effect. If a change affects accounts or waitlist emails, we'll email the people affected first.