Privacy Policy.

WT Digital (“we,” “us,” or “our”) is a digital studio providing AI consulting, automation, and web development services, and the publisher of WT Terminal, an equity analysis product. Our website is wtdigital.org.

We are the controller of the personal information described in this policy. For any privacy question, or to exercise any right described below, contact hello@wtdigital.org.

If you contact us:

• Enquiry data — your name, company name, email address, budget range, service interests, and project description, when you submit the contact form.
• Communications — if you email us directly, we retain those messages.

If you create an account:

• Account data — your name, email address, and a securely hashed password, held via Supabase. We never see your password in readable form.
• Verification data — the fact and time of your email confirmation, and your acceptance of our Terms and Disclosures, including when you accepted them.

If you use WT Terminal:

• Stated interests — the companies, sectors, or themes you tell us interest you during onboarding.
• Watchlist — the ticker symbols you save.
• Run history — the securities you have analysed, when, and the analysis produced, so you can return to a past result without paying for it again.
• Plan and usage data — your tier, credit balance, and credits consumed.

If you pay us:

• Payment data — handled by our payment processor, Stripe. We receive a customer reference, the status of your subscription, and the last four digits and brand of your card. We never receive or store your full card number.

Automatically, in all cases:

• Log data — standard server logs including IP address, browser type, and page requests, retained for security and diagnostics.
• Usage data — aggregated, cookieless analytics, and only if you consent. See §08.

This is as important as what we do collect, so we state it plainly. We do not ask for, and we do not hold:

• Your age, income, net worth, or tax position
• Your investment objectives, time horizon, or risk tolerance
• Your actual holdings, positions, trades, or portfolio value
• Your brokerage account, bank account, or any credentials to a financial institution
• Your government identification, Social Security number, or date of birth

We have no connection to any broker and no ability to see or place a trade. Because we never collect any of the above, the analysis cannot be and is not tailored to your circumstances — the same security produces the same reading for every reader. Your watchlist and stated interests change which companies we show you. They do not change a single word of the analysis of any of them.

This is explained further in our Disclosures.

We use the information we collect to:

• Create and operate your account, and authenticate you
• Provide the analysis you request, and let you revisit your past results
• Choose which companies to display on your dashboard, based on the interests you told us about and the symbols you saved
• Take payment, manage your plan, and meter credits
• Send you transactional messages — email verification, password resets, payment receipts, and notices about changes to these policies
• Respond to your enquiries and manage professional-services engagements
• Detect, prevent, and investigate fraud, abuse, and security incidents
• Improve the reliability and quality of the product
• Comply with legal obligations

Profiling and automated decisions. We use your stated interests and watchlist to decide which companies appear on your screen. That is the only personalisation in the product. We do not make any decision about you that produces a legal or similarly significant effect, we do not build advertising profiles, and we do not use your information to alter the substance of any analysis.

Marketing. We will only send you marketing email if you have asked to receive it, and every such message contains a one-click unsubscribe that we honour promptly.

If you are in the United Kingdom or the European Economic Area, we process your personal data on these bases:

• Contractual necessity — to provide the account, product, or services you have asked for.
• Legitimate interests — to secure our systems, prevent abuse, respond to enquiries, and improve the product, balanced against your rights.
• Consent — for optional analytics and for marketing email. You may withdraw consent at any time, as easily as you gave it.
• Legal obligation — where processing is required by law.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We use the following service providers, each of which processes data on our instructions:

• Supabase — database and authentication. Stores your account, watchlist, and run history in US data centres. Privacy Policy.
• Vercel — website hosting and cookieless analytics. Privacy Policy.
• Render — hosts the analysis engine that processes your requests. Privacy Policy.
• Anthropic — provides the AI models that generate the analysis. When you request analysis of a security, the ticker symbol and the public financial data for that company are sent to Anthropic's API. Your name, email, account identifier, watchlist, and history are not sent. Privacy Policy.
• Stripe — payment processing. Stripe collects and holds your card details directly under its own privacy policy. Privacy Policy.
• Resend — transactional email delivery. Privacy Policy.

Market data is retrieved from public third-party financial data sources. We send them a ticker symbol; we do not send them anything about you.

We may also disclose information where required by law, court order, or lawful request, or where necessary to protect our rights or the safety of others. If we are ever party to a merger, acquisition, or sale of assets, information may transfer as part of it, and we will tell you before it becomes subject to a different policy.

Where we deliver professional services, we may use third-party AI providers as described in the relevant Statement of Work.

• Account data — while your account is open, and for up to 30 days after you close it, after which it is deleted.
• Run history, watchlist, and stated interests — while your account is open. You can delete individual items at any time, and all of it is deleted with your account.
• Payment and transaction records — up to 7 years, because tax and accounting law requires it.
• Contact form submissions — typically no longer than 3 years after our last communication.
• Server logs — a short rolling window for security and diagnostics.

Request deletion at any time by emailing hello@wtdigital.org. We action deletion requests within 30 days, except for records we are legally required to keep.

• Strictly necessary cookies — required for authentication and to keep you signed in. These do not require consent, and the site cannot work without them.
• Vercel Analytics — a cookieless, privacy-first analytics tool. It sets no cookies, uses no persistent identifiers, collects no personal data, and produces only aggregated statistics such as pages visited, referrer, device type, and region. It loads only if you accept analytics in our banner, and not before.

We use no advertising cookies, no third-party trackers, no pixels, and no session-replay tools, and we run no Google Analytics.

Changing your mind. Select “Cookie choices” in the footer at any time to withdraw or change your analytics consent — it is exactly as easy as giving it. We record which version of this notice you consented to, and if we ever add a non-essential tool we will ask again rather than treat your earlier answer as covering it.

Do Not Track. There is no consistent industry standard for DNT signals, so we do not respond to them. Because analytics are off until you opt in, the outcome for a DNT user is the same.

Depending on where you live, you may have the right to:

• Know what personal information we hold about you, and get a copy of it
• Correct information that is inaccurate
• Delete your information
• Receive it in a portable, machine-readable format
• Object to or restrict certain processing
• Withdraw consent at any time, where processing is based on consent
• Opt out of the sale or sharing of personal information, and of profiling — we do none of these, so there is nothing to opt out of
• Not be discriminated against for exercising any of these rights
• Appeal a decision we make about your request
• Complain to your data protection authority or state attorney general

To exercise any right, email hello@wtdigital.org. We will verify your identity — usually by confirming control of the account email — and respond within 30 days, or 45 days where US state law allows and we tell you why we need longer. There is no charge. If we decline a request we will explain why, and you may appeal by replying to our response.

You may also use an authorised agent where the law permits, and we may ask for proof of their authority.

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Tennessee, and other states with comprehensive privacy laws have the rights described in §09, and we extend them to every user regardless of where they live rather than operating a different policy per state.

For clarity, and because these are the questions those laws are written to answer:

• We have not sold personal information, and we do not share it for cross-context behavioural advertising or targeted advertising.
• We do not use personal information for profiling in furtherance of decisions producing legal or similarly significant effects.
• We do not knowingly collect or process the personal information of anyone under 18.
• We do not collect sensitive personal information as those laws define it. We do not treat a watchlist or a stated interest in a company as a financial account or as information about your finances, because it tells us nothing about what you own or what you are worth — but we hold it with the same care as the rest of your account data.

California residents may also request the categories of personal information collected, the sources, the business purpose, and the categories of recipients — all of which are set out in §02, §04, and §06.

We take reasonable technical and organisational measures to protect your information, including encrypted connections (TLS), encryption at rest with our database provider, row-level security so that one account cannot read another's data, hashed passwords, checks that reject passwords known to have appeared in public breaches, and restricted administrative access.

No system is completely secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities without undue delay and as required by law. If you believe your account has been compromised, contact us immediately at hello@wtdigital.org.

We are based in the United States and our service providers store and process data in the United States. If you access our products from outside the US, you understand that your information will be transferred to, stored in, and processed in the United States, where data protection law differs from that of your country.

WT Terminal is offered from the United States and intended for US residents. Where we transfer personal data from the UK or EEA, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses where applicable. Contact us for details.

Our products are for adults. You must be at least 18 to create an account or use WT Terminal, and our website and services are not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact us and we will delete it promptly.

We may update this policy. We will revise the “Last updated” date above with every revision, and for material changes — a new category of information, a new purpose, or a new recipient — we will give you notice by email or in the product at least 30 days before the change takes effect, and ask for fresh consent where consent is the basis for the processing.

WT Digital
Email: hello@wtdigital.org
Website: wtdigital.org

See also our Terms of Service and, if you use WT Terminal, our Disclosures.