Privacy Policy

1. Who we are

Canary Alpha Research LLC is a Delaware limited liability company in the USA. We are responsible for the personal data described here. Privacy questions or requests: hello@canaryalpha.co. The Service is only for people 18 and older.

2. What we collect

Information you give us

• Contact form: your name, email, phone number and an optional message.
• Account signup: your email address, your name if you give it, and your password (kept only as a secure hash by our login provider, Clerk; we never see it), plus your confirmation that you are 18 or older and the date and time you agreed to our Terms, Privacy Policy and Disclaimer.
• Custom reports: the questions and details you share so we can prepare your report.

Collected automatically

• Your theme choice (Light or Dark), saved in your browser’s local storage so the site remembers it.
• Basic technical data our hosting provider records when you visit, such as IP address, browser type and pages requested, for security and to keep the site running.
• Login data: when you log in, Clerk records the device, browser and approximate location (from your IP address) of each session, so you can see where you’re logged in and to protect your account.

From third parties

• Stripe tells us whether a payment succeeded, along with basic billing details such as your name, email, country and the last four digits of your card. We never see or store your full card number.

3. How we use it

• To provide the Service and your account.
• To manage subscriptions, payments and refunds.
• To prepare and deliver custom reports.
• To reply to your messages.
• To keep the Service secure and prevent spam and fraud.
• To meet legal, accounting and tax duties.
• To send service emails.

4. Marketing emails

We don’t currently send newsletters or marketing emails. We only send service emails, such as account, billing, security and report-related messages. If we start sending marketing emails, we will ask for your consent first, include an unsubscribe link in every email, and update this policy.

5. We don’t sell your data

We do not sell your personal data. We do not share it for cross-context behavioural advertising.

6. Who we share it with

We share data only with service providers that help us run the Service, and only for these purposes:

• Stripe: payments and refunds. See Stripe’s Privacy Policy.
• Clerk: runs our accounts: sign-up, login, password resets, email verification codes and account deletion. It stores your email address, name and password hash for us, and sends the codes that verify your email. At sign-up it may show a bot check from Cloudflare Turnstile. See Clerk’s Privacy Policy.
• Vercel: hosts the website and the server code behind your account. Like any web host, it receives your IP address when you visit. See Vercel’s Privacy Policy.
• Hostinger: hosts our email, including messages you send to hello@canaryalpha.co. See Hostinger’s Privacy Policy.
• Formspree: receives what you send through our contact and join-the-list forms (including which plan you asked about) and forwards it to us by email. See Formspree’s Privacy Policy.
• Apple and Google, if you choose to sign up or log in with them: they confirm who you are and send us your name and email address. We don’t get your Apple or Google password. See Apple’s Privacy Policy and Google’s Privacy Policy.
• Google Fonts and Fontshare (Indian Type Foundry): serve the fonts our pages use. Your browser downloads the fonts from their servers, which receive your IP address. See Google’s Privacy Policy and Indian Type Foundry’s Privacy Policy.

We share data with legal authorities only when the law requires it.

7. Cookies and local storage

We use only essential storage:

• Your theme choice, saved in your browser’s local storage.
• Login cookies set by Clerk (such as __session and __client_uat on our site, and __client on clerk.canaryalpha.co), which keep you logged in and protect your account. They are only set once you sign up or log in.
• Your name, email and plan, kept in your browser tab’s session storage while you’re logged in, so the menu can show them. It is cleared when you close the tab or log out.
• Stripe’s own cookies during checkout, used to prevent fraud.

We don’t use analytics, advertising or tracking cookies, so you won’t see a cookie banner. To clear what’s stored, use your browser’s settings to clear site data for our website.

8. How long we keep data

9. Security

We use reasonable measures to protect your data, such as encrypted connections and limited access. No system is perfectly secure, so we can’t guarantee absolute security.

10. Your rights

You can change your name, email and password, and delete your account, yourself on your Settings page. You can also ask to access, correct, delete or export your data, object to how we use it, or withdraw consent you’ve given. Email hello@canaryalpha.co. We’ll respond within 30 days.

11. Rights in your region

EU and UK (GDPR)

• Why we may use your data: to perform our contract with you (your account, subscription and reports); your consent (for example, any future marketing); and our legitimate interests (security, fraud prevention, improving the Service).
• Complaints: you can complain to your local data protection authority.
• Transfers: your data is processed in the USA, using safeguards the law requires, such as Standard Contractual Clauses where applicable.

California (CCPA/CPRA)

• You have the right to know, delete and correct your personal information, and to opt out of its sale or sharing. We don’t sell or share it.
• We won’t treat you differently for using these rights.

12. Children

The Service is only for people 18 and older. If we learn that someone under 18 has signed up, we’ll delete their data.

13. Changes to this policy

We’ll post updates here with a new “Last updated” date, and we’ll email account holders about material changes.

14. Contact

Privacy questions or requests: hello@canaryalpha.co.