Privacy Policy

Privacy Policy

Last updated: May 21, 2026

1. What We Collect

When you sign up for the newsletter, community, or any other form on investorsource.io, we collect:

  • What you provide: First name and email address. If you join the community, optionally a last name and a password (the password is stored hashed; we never see your plaintext password).
  • How you interacted: The form you submitted (popup vs blog inline vs landing page), the source page URL, and the timestamp.
  • Standard server logs: Your IP address and browser user-agent string, retained for security and debugging purposes via standard web-server logs.

We may, in the future, also collect:

  • Email opens and clicks (via tracking pixels and link redirects in our outbound email)
  • UTM tags and referrer URLs when you arrive from an external link
  • Approximate geographic region inferred from IP address
  • Device, browser, and operating system inferred from the user-agent string

We will update this policy before any such additional collection goes live.

2. Why We Collect It

  • To deliver the email content you signed up to receive
  • To measure which content is most useful so we can improve it
  • To detect and prevent abuse of the service
  • To respond to your inquiries

3. Who Receives It

Your data is stored on systems we operate. We use the following third-party services that may process your data on our behalf:

  • Google Workspace — for sending outbound email
  • OVH — for hosting our website and database
  • Cloudflare — for DNS and security

We do not sell your data. We do not share your personal data with marketing partners, data brokers, or AI training datasets.

4. Cookies

The site may use cookies for session management and to remember whether you have dismissed our signup popup. We do not currently use third-party advertising or retargeting cookies.

5. Your Rights

  • Unsubscribe: Use the link at the bottom of any of our emails, or email support@investorsource.io.
  • Request a copy of your data: Email support@investorsource.io with the subject line "Data request."
  • Request deletion: Email support@investorsource.io with the subject line "Delete my data." We will delete your subscriber record and all associated data within 30 days.
  • CCPA / GDPR: California, EU, and UK residents have additional statutory rights covering access, correction, deletion, portability, and objection. We honor all such requests at no cost.

6. Data Retention

We retain subscriber records as long as you are subscribed plus a reasonable period (typically 90 days) after unsubscribe for audit and bounce-handling purposes. Standard server logs are retained for up to 90 days. Future click and analytics data, if collected, will be retained for up to 2 years.

7. Children

The service is not directed at children under 16, and we do not knowingly collect data from anyone under 16. If we learn we have collected data from a child under 16, we will delete it promptly.

8. Security

We use standard industry safeguards (HTTPS encryption in transit, hashed passwords, restricted server access) to protect your data. No system is perfectly secure; if a breach occurs that affects you, we will notify you as required by applicable law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the newsletter or a notice on the site. The "last updated" date at the top reflects the most recent revision.

10. Contact

Questions about this policy or your data? Email support@investorsource.io.